{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,14]],"date-time":"2025-06-14T05:24:36Z","timestamp":1749878676209,"version":"3.37.3"},"reference-count":72,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tnse.2023.3260880","type":"journal-article","created":{"date-parts":[[2023,3,23]],"date-time":"2023-03-23T17:49:49Z","timestamp":1679593789000},"page":"1-13","source":"Crossref","is-referenced-by-count":2,"title":["Vulnerability of Package Dependency Networks"],"prefix":"10.1109","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0369-0716","authenticated-orcid":false,"given":"Daniel","family":"Set\u00f3-Rey","sequence":"first","affiliation":[{"name":"Ingeniería Informática, Universidad de Burgos, Burgos, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6653-043X","authenticated-orcid":false,"given":"Jos\u00e9 Ignacio","family":"Santos-Mart\u00edn","sequence":"additional","affiliation":[{"name":"Ingeniería de Organización, Universidad de Burgos, Burgos, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8462-212X","authenticated-orcid":false,"given":"Carlos","family":"L\u00f3pez-Nozal","sequence":"additional","affiliation":[{"name":"Ingeniería Informática, Universidad de Burgos, Burgos, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-03345-6"},{"article-title":"Analysis of the 2014 open source development and application security survey","year":"2014","author":"Lane","key":"ref2"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CogMI48466.2019.00032"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663755"},{"article-title":"The state of open source security 2020 snyk","year":"2020","author":"Miller","key":"ref5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2012.02.001"},{"article-title":"dsr0018\/olivia: OLIVIA - open-source library indexes vulnerability identification and analysis","year":"2022","author":"Set-Rey","key":"ref7"},{"year":"2020","key":"ref8","article-title":"Libraries.io open data"},{"volume-title":"Linux Annoyances for Geeks: Getting the Most Flexible System in the World Just the Way You Want It","year":"2006","author":"Jang","key":"ref9"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-008-9100-x"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23055"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SANER50967.2021.00048"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-09959-3"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"351","DOI":"10.1145\/2901739.2901743","article-title":"A look at the dynamics of the javascript package ecosystem","volume-title":"Proc. IEEE\/ACM 13th Work. Conf. Mining Softw. Repositories","author":"Wittern","year":"2016"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3068901"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76440-3_3"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950325"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2384416.2384418"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1103\/physreve.68.046116"},{"issue":"16","key":"ref20","first-page":"2968","article-title":"Community structure of complex software systems: Analysis and applications","volume-title":"Physica A: Stat. Mechanics Appl.","volume":"390","author":"ubelj","year":"2011"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9589-y"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.55"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330217"},{"key":"ref24","first-page":"995","article-title":"Smallworld with high risks: A study of security threats in the npm ecosystem","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Zimmermann","year":"2019"},{"year":"2020","key":"ref25","article-title":"Wg securing critical projects"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.physrep.2005.10.009"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1038\/35019019"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0610245104"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevLett.85.5468"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1017\/cbo9780511610905"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.3389\/fphy.2022.823564"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1098\/rsif.2022.0043"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511791383"},{"key":"ref34","doi-asserted-by":"crossref","DOI":"10.1093\/acprof:oso\/9780199206650.001.0001","volume-title":"Networks: An Introduction","author":"Newman","year":"2010"},{"volume-title":"Netw. Sci.","year":"2016","author":"Barabsi","key":"ref35"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.physrep.2021.10.005"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.66.016128"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1038\/ncomms7101"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.082090499"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1098\/rspa.2009.0410"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1111\/1467-937X.00059"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/b978-0-444-53766-9.00003-3"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511804052"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/BF01940892"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-09526-8_27"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1137\/0201010"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/BF01588971"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejor.2008.08.022"},{"article-title":"Tiobe index","year":"2021","author":"Company","key":"ref49"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-90421-4_6"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09792-9"},{"article-title":"Vulnerabilities in the core.preliminary report and census II of open source software","year":"2020","author":"Nagle","key":"ref52"},{"article-title":"Omg unified modeling languageversion 2.5.1","year":"2017","author":"Group","key":"ref53"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/SANER48275.2020.9054837"},{"key":"ref55","first-page":"205","article-title":"On the strong connectedness of directed random graphs","volume":"1","author":"Palsti","year":"1966","journal-title":"Studia Sci. Math. Hungar"},{"issue":"1","key":"ref56","first-page":"17","article-title":"On the evolution of random graphs","volume":"5","author":"Erds","year":"1960","journal-title":"Pub. Math. Inst. Hung. Acad. Sci"},{"issue":"1","key":"ref57","first-page":"309","article-title":"Graph structure in the web","volume-title":"Comput. Netw.","volume":"33","author":"Broder","year":"2000"},{"issue":"4","key":"ref58","first-page":"179","article-title":"Highly optimised global organisation of metabolic networks","volume-title":"IEE Proc. - Syst. Biol.","volume":"152","author":"Tanaka","year":"2005"},{"key":"ref59","first-page":"1","article-title":"Bow-tie decomposition in directed graphs","volume-title":"Proc. 14th Int. Conf. Inf. Fusion","author":"Yang","year":"2011"},{"key":"ref60","first-page":"85","article-title":"Reducibility among combinatorial problems","volume-title":"Proc. Symp. Complexity Comput. Computations, IBM Thomas J. Watson Res. Center","author":"Karp","year":"1972"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2011.11.011"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.2307\/3033543"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9325-9"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.64.025101"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106267"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3447245"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3418209"},{"article-title":"Security issues in language-based sofware ecosystems","year":"2019","author":"Vaidya","key":"ref69"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1038\/35036627"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1142\/S0218127412501817"},{"key":"ref72","article-title":"Introduction to functional dependency network analysis","volume-title":"Proc. MITRE Corporation Old Dominion, 2nd Int. Symp. Eng. Syst.","volume":"5","author":"Garvey","year":"2009"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488902\/6930788\/10079181.pdf?arnumber=10079181","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,3]],"date-time":"2024-03-03T07:47:36Z","timestamp":1709452056000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10079181\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":72,"URL":"https:\/\/doi.org\/10.1109\/tnse.2023.3260880","relation":{},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"type":"electronic","value":"2327-4697"},{"type":"electronic","value":"2334-329X"}],"subject":[],"published":{"date-parts":[[2023]]}}}