{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,12]],"date-time":"2026-02-12T08:10:07Z","timestamp":1770883807242,"version":"3.50.1"},"reference-count":15,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,2,1]],"date-time":"2019-02-01T00:00:00Z","timestamp":1548979200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,2,1]],"date-time":"2019-02-01T00:00:00Z","timestamp":1548979200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,2,1]],"date-time":"2019-02-01T00:00:00Z","timestamp":1548979200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,2]]},"DOI":"10.1109\/saner.2019.8667984","type":"proceedings-article","created":{"date-parts":[[2019,3,19]],"date-time":"2019-03-19T01:30:10Z","timestamp":1552959010000},"page":"619-623","source":"Crossref","is-referenced-by-count":34,"title":["On the Impact of Outdated and Vulnerable Javascript Packages in Docker Images"],"prefix":"10.1109","author":[{"given":"Ahmed","family":"Zerouali","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Valerio","family":"Cosentino","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tom","family":"Mens","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gregorio","family":"Robles","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jesus M.","family":"Gonzalez-Barahona","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.140"},{"key":"ref11","first-page":"559","article-title":"Towards smoother library migrations: A look at vulnerable dependency migrations at function level for npm JavaScript packages","author":"zapata","year":"2018","journal-title":"ICSM"},{"key":"ref12","doi-asserted-by":"crossref","DOI":"10.1145\/3196398.3196401","article-title":"On the impact of security vulnerabilities in the npm package dependency network","author":"decan","year":"2018","journal-title":"Working Conference on Mining Software Repositories"},{"key":"ref13","article-title":"Thou shalt not depend on me: Analysing the use of outdated javascript libraries on the web","author":"lauinger","year":"2017","journal-title":"NDSS Symposium"},{"key":"ref14","author":"nesbitt","year":"2018","journal-title":"Libraries io open source repository and dependency metadata"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985457"},{"key":"ref4","author":"gummaraju","year":"2015","journal-title":"Over 30% of official images in docker hub contain high priority security vulnerabilities"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029832"},{"key":"ref6","author":"wire","year":"2018","journal-title":"npm inc report State of javascript reveals most popular web development frameworks"},{"key":"ref5","article-title":"On the relation between outdated package containers, security vulnerabilities, and bugs","author":"zerouali","year":"2019","journal-title":"SANE"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9521-5"},{"key":"ref7","first-page":"182","article-title":"Technical lag in software compilations: Measuring how outdated a software deployment is","author":"gonzalez-barahona","year":"2017","journal-title":"ICOSSE"},{"key":"ref2","author":"inc","year":"2018","journal-title":"Docker-Build Ship and Run Any App Anywhere"},{"key":"ref1","author":"turnbull","year":"2014","journal-title":"The Docker Book Containerization is the new virtualization"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-90421-4_6"}],"event":{"name":"2019 IEEE 26th International Conference on Software Analysis, Evolution and Reengineering (SANER)","location":"Hangzhou, China","start":{"date-parts":[[2019,2,24]]},"end":{"date-parts":[[2019,2,27]]}},"container-title":["2019 IEEE 26th International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8663526\/8667965\/08667984.pdf?arnumber=8667984","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T14:45:24Z","timestamp":1658155524000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8667984\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,2]]},"references-count":15,"URL":"https:\/\/doi.org\/10.1109\/saner.2019.8667984","relation":{},"subject":[],"published":{"date-parts":[[2019,2]]}}}