{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T00:10:08Z","timestamp":1759018208136,"version":"3.44.0"},"reference-count":45,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2023,11,28]],"date-time":"2023-11-28T00:00:00Z","timestamp":1701129600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Systems and Software"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1016\/j.jss.2023.111916","type":"journal-article","created":{"date-parts":[[2023,11,28]],"date-time":"2023-11-28T11:38:28Z","timestamp":1701171508000},"page":"111916","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["DValidator: An approach for validating dependencies in build configurations"],"prefix":"10.1016","volume":"209","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8182-7277","authenticated-orcid":false,"given":"Christian","family":"Macho","sequence":"first","affiliation":[]},{"given":"Fabian","family":"Oraze","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5536-3859","authenticated-orcid":false,"given":"Martin","family":"Pinzger","sequence":"additional","affiliation":[]}],"member":"78","reference":[{"key":"10.1016\/j.jss.2023.111916_b1","series-title":"2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering","first-page":"547","article-title":"Dependency solving is still hard, but we are getting better at it","author":"Abate","year":"2020"},{"issue":"10","key":"10.1016\/j.jss.2023.111916_b2","doi-asserted-by":"crossref","first-page":"2228","DOI":"10.1016\/j.jss.2012.02.018","article-title":"Dependency solving: A separate concern in component evolution management","volume":"85","author":"Abate","year":"2012","journal-title":"J. Syst. Softw."},{"key":"10.1016\/j.jss.2023.111916_b3","series-title":"2021 IEEE\/ACM 18th International Conference on Mining Software Repositories","first-page":"254","article-title":"On the use of dependabot security pull requests","author":"Alfadel","year":"2021"},{"key":"10.1016\/j.jss.2023.111916_b4","series-title":"2013 IEEE International Conference on Software Maintenance","first-page":"280","article-title":"The evolution of project inter-dependencies in a software ecosystem: The case of Apache","author":"Bavota","year":"2013"},{"issue":"5","key":"10.1016\/j.jss.2023.111916_b5","doi-asserted-by":"crossref","first-page":"1275","DOI":"10.1007\/s10664-014-9325-9","article-title":"How the apache community upgrades dependencies: An evolutionary study","volume":"20","author":"Bavota","year":"2015","journal-title":"Empir. Softw. Eng."},{"key":"10.1016\/j.jss.2023.111916_b6","article-title":"Towards better dependency management: A first look at dependency smells in Python projects","author":"Cao","year":"2022","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"8","key":"10.1016\/j.jss.2023.111916_b7","article-title":"Opportunities for software reuse in an uncertain world: From past to emerging trends","volume":"31","author":"Capilla","year":"2019","journal-title":"J. Softw.: Evol. Process"},{"issue":"8","key":"10.1016\/j.jss.2023.111916_b8","article-title":"The new era of software reuse","volume":"31","author":"Capilla","year":"2019","journal-title":"J. Softw.: Evol. Process"},{"issue":"2","key":"10.1016\/j.jss.2023.111916_b9","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10664-020-09904-w","article-title":"Helping or not helping? Why and how trivial packages impact the npm ecosystem","volume":"26","author":"Chen","year":"2021","journal-title":"Empir. Softw. Eng."},{"key":"10.1016\/j.jss.2023.111916_b10","series-title":"Software Technology: 10 Years of Innovation in IEEE Computer","article-title":"Inter-component dependency issues in software ecosystems","author":"Claes","year":"2018"},{"issue":"5","key":"10.1016\/j.jss.2023.111916_b11","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1109\/MS.2022.3179484","article-title":"Understanding the customization of dependency bots: The case of dependabot","volume":"39","author":"Cogo","year":"2022","journal-title":"IEEE Softw."},{"key":"10.1016\/j.jss.2023.111916_b12","series-title":"2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering. Vol. 2","first-page":"109","article-title":"Measuring dependency freshness in software systems","author":"Cox","year":"2015"},{"key":"10.1016\/j.jss.2023.111916_b13","series-title":"2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering","first-page":"2","article-title":"An empirical comparison of dependency issues in OSS packaging ecosystems","author":"Decan","year":"2017"},{"key":"10.1016\/j.jss.2023.111916_b14","series-title":"2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering. Vol. 1","first-page":"493","article-title":"When GitHub meets CRAN: An analysis of inter-repository package dependency problems","author":"Decan","year":"2016"},{"key":"10.1016\/j.jss.2023.111916_b15","doi-asserted-by":"crossref","unstructured":"Di Cosmo, R., Zacchiroli, S., Trezentos, P., 2008. Package upgrades in FOSS distributions: Details and challenges. In: Proceedings of the 1st International Workshop on Hot Topics in Software Upgrades. pp. 1\u20135.","DOI":"10.1145\/1490283.1490292"},{"key":"10.1016\/j.jss.2023.111916_b16","doi-asserted-by":"crossref","unstructured":"Fan, G., Wang, C., Wu, R., Xiao, X., Shi, Q., Zhang, C., 2020. Escaping dependency hell: Finding build dependency errors with the unified dependency graph. In: Proceedings of the 29th ACM SIGSOFT International Symposium on Software Testing and Analysis. pp. 463\u2013474.","DOI":"10.1145\/3395363.3397388"},{"issue":"7","key":"10.1016\/j.jss.2023.111916_b17","doi-asserted-by":"crossref","first-page":"529","DOI":"10.1109\/TSE.2005.85","article-title":"Software reuse research: Status and future","volume":"31","author":"Frakes","year":"2005","journal-title":"IEEE Trans. Softw. Eng."},{"year":"2014","series-title":"Clingo=ASP+ control: Preliminary report","author":"Gebser","key":"10.1016\/j.jss.2023.111916_b18"},{"year":"2011","series-title":"Aspcud: A linux package configuration tool based on answer set programming","author":"Gebser","key":"10.1016\/j.jss.2023.111916_b19"},{"issue":"2","key":"10.1016\/j.jss.2023.111916_b20","doi-asserted-by":"crossref","first-page":"107","DOI":"10.3233\/AIC-2011-0491","article-title":"Potassco: The Potsdam answer set solving collection","volume":"24","author":"Gebser","year":"2011","journal-title":"Ai Commun."},{"key":"10.1016\/j.jss.2023.111916_b21","doi-asserted-by":"crossref","unstructured":"Hassan, F., Wang, X., 2018. Hirebuild: An automatic approach to history-driven repair of build scripts. In: Proceedings of the 40th International Conference on Software Engineering. pp. 1078\u20131089.","DOI":"10.1145\/3180155.3180181"},{"year":"2022","series-title":"Automating dependency updates in practice: An exploratory study on GitHub dependabot","author":"He","key":"10.1016\/j.jss.2023.111916_b22"},{"key":"10.1016\/j.jss.2023.111916_b23","doi-asserted-by":"crossref","unstructured":"Huang, K., Chen, B., Shi, B., Wang, Y., Xu, C., Peng, X., 2020. Interactive, effort-aware library version harmonization. In: Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. pp. 518\u2013529.","DOI":"10.1145\/3368089.3409689"},{"year":"2010","series-title":"Continuous Delivery: Reliable Software Releases Through Build, Test, and Deployment Automation","author":"Humble","key":"10.1016\/j.jss.2023.111916_b24"},{"key":"10.1016\/j.jss.2023.111916_b25","doi-asserted-by":"crossref","unstructured":"Ignatiev, A., Janota, M., Marques-Silva, J., 2014. Towards efficient optimization in package management systems. In: Proceedings of the 36th International Conference on Software Engineering. pp. 745\u2013755.","DOI":"10.1145\/2568225.2568306"},{"issue":"10","key":"10.1016\/j.jss.2023.111916_b26","doi-asserted-by":"crossref","first-page":"3790","DOI":"10.1109\/TSE.2021.3106247","article-title":"Dependency smells in Javascript projects","volume":"48","author":"Jafari","year":"2021","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10.1016\/j.jss.2023.111916_b27","series-title":"2014 IEEE International Conference on Software Maintenance and Evolution","first-page":"41","article-title":"Why do automated builds break? an empirical study","author":"Kerzazi","year":"2014"},{"key":"10.1016\/j.jss.2023.111916_b28","series-title":"2017 IEEE\/ACM 14th International Conference on Mining Software Repositories","first-page":"102","article-title":"Structure and evolution of package dependency networks","author":"Kikas","year":"2017"},{"issue":"1","key":"10.1016\/j.jss.2023.111916_b29","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1007\/s10664-017-9521-5","article-title":"Do developers update their library dependencies?","volume":"23","author":"Kula","year":"2018","journal-title":"Empir. Softw. Eng."},{"key":"10.1016\/j.jss.2023.111916_b30","doi-asserted-by":"crossref","unstructured":"Larios Vargas, E., Aniche, M., Treude, C., Bruntink, M., Gousios, G., 2020. Selecting third-party libraries: The practitioners\u2019 perspective. In: Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. pp. 245\u2013256.","DOI":"10.1145\/3368089.3409711"},{"key":"10.1016\/j.jss.2023.111916_b31","doi-asserted-by":"crossref","unstructured":"Macho, C., McIntosh, S., Pinzger, M., 2018. Automatically Repairing Dependency-Related Build Breakage. In: Proc. of the International Conference on Software Analysis, Evolution, and Reengineering. SANER, pp. 106\u2013117.","DOI":"10.1109\/SANER.2018.8330201"},{"issue":"11","key":"10.1016\/j.jss.2023.111916_b32","doi-asserted-by":"crossref","first-page":"2385","DOI":"10.1007\/s00607-020-00833-6","article-title":"On opportunistic software reuse","volume":"102","author":"M\u00e4kitalo","year":"2020","journal-title":"Computing"},{"key":"10.1016\/j.jss.2023.111916_b33","doi-asserted-by":"crossref","unstructured":"Pinckney, D., Cassano, F., Guha, A., Bell, J., Culpo, M., Gamblin, T., 2023. Flexible and optimal dependency management via max-smt. In: Proceedings of the 2023 International Conference on Software Engineering. Ser. ICSE.","DOI":"10.1109\/ICSE48619.2023.00124"},{"key":"10.1016\/j.jss.2023.111916_b34","series-title":"2017 IEEE\/ACM 14th International Conference on Mining Software Repositories","first-page":"345","article-title":"An empirical analysis of build failures in the continuous integration workflows of Java-based open-source software","author":"Rausch","year":"2017"},{"key":"10.1016\/j.jss.2023.111916_b35","doi-asserted-by":"crossref","unstructured":"Seo, H., Sadowski, C., Elbaum, S., Aftandilian, E., Bowdidge, R., 2014. Programmers\u2019 build errors: A case study (at Google). In: Proceedings of the 36th International Conference on Software Engineering. pp. 724\u2013734.","DOI":"10.1145\/2568225.2568255"},{"key":"10.1016\/j.jss.2023.111916_b36","doi-asserted-by":"crossref","first-page":"3909","DOI":"10.1109\/ACCESS.2017.2685629","article-title":"Continuous integration, delivery and deployment: A systematic review on approaches, tools, challenges and practices","volume":"5","author":"Shahin","year":"2017","journal-title":"IEEE Access"},{"key":"10.1016\/j.jss.2023.111916_b37","doi-asserted-by":"crossref","unstructured":"Soto-Valero, C., Durieux, T., Baudry, B., 2021a. A longitudinal analysis of bloated Java dependencies. In: Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. pp. 1021\u20131031.","DOI":"10.1145\/3468264.3468589"},{"issue":"3","key":"10.1016\/j.jss.2023.111916_b38","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10664-020-09914-8","article-title":"A comprehensive study of bloated dependencies in the Maven ecosystem","volume":"26","author":"Soto-Valero","year":"2021","journal-title":"Empir. Softw. Eng."},{"key":"10.1016\/j.jss.2023.111916_b39","doi-asserted-by":"crossref","unstructured":"Tanabe, Y., Aotani, T., Masuhara, H., 2018. A context-oriented programming approach to dependency hell. In: Proceedings of the 10th International Workshop on Context-Oriented Programming: Advanced Modularity for Run-Time Composition. pp. 8\u201314.","DOI":"10.1145\/3242921.3242923"},{"key":"10.1016\/j.jss.2023.111916_b40","series-title":"Seventh European Conference OnSoftware Maintenance and Reengineering, 2003. Proceedings","first-page":"91","article-title":"Identifying refactoring opportunities using logic meta programming","author":"Tourw\u00e9","year":"2003"},{"key":"10.1016\/j.jss.2023.111916_b41","article-title":"Common upgradeability description format (CUDF) 2.0","volume":"3","author":"Treinen","year":"2009","journal-title":"Mancoosi Project (FP7)"},{"key":"10.1016\/j.jss.2023.111916_b42","doi-asserted-by":"crossref","unstructured":"Valiev, M., Vasilescu, B., Herbsleb, J., 2018. Ecosystem-level determinants of sustained activity in open-source projects: A case study of the PyPI ecosystem. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. pp. 644\u2013655.","DOI":"10.1145\/3236024.3236062"},{"key":"10.1016\/j.jss.2023.111916_b43","doi-asserted-by":"crossref","unstructured":"Wang, Y., Wen, M., Liu, Z., Wu, R., Wang, R., Yang, B., Yu, H., Zhu, Z., Cheung, S.-C., 2018. Do the dependency conflicts in my project matter?. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. pp. 319\u2013330.","DOI":"10.1145\/3236024.3236056"},{"key":"10.1016\/j.jss.2023.111916_b44","series-title":"2019 IEEE\/ACM 41st International Conference on Software Engineering","first-page":"572","article-title":"Could i have a stack trace to examine the dependency conflict issue?","author":"Wang","year":"2019"},{"key":"10.1016\/j.jss.2023.111916_b45","article-title":"Will dependency conflicts affect my program\u2019s semantics","author":"Wang","year":"2021","journal-title":"IEEE Trans. Softw. Eng."}],"container-title":["Journal of Systems and Software"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0164121223003114?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0164121223003114?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T23:36:28Z","timestamp":1759016188000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0164121223003114"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":45,"alternative-id":["S0164121223003114"],"URL":"https:\/\/doi.org\/10.1016\/j.jss.2023.111916","relation":{},"ISSN":["0164-1212"],"issn-type":[{"type":"print","value":"0164-1212"}],"subject":[],"published":{"date-parts":[[2024,3]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"DValidator: An approach for validating dependencies in build configurations","name":"articletitle","label":"Article Title"},{"value":"Journal of Systems and Software","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.jss.2023.111916","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2023 The Authors. Published by Elsevier Inc.","name":"copyright","label":"Copyright"}],"article-number":"111916"}}