{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,27]],"date-time":"2025-08-27T16:17:14Z","timestamp":1756311434060,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":11,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,6,27]],"date-time":"2020-06-27T00:00:00Z","timestamp":1593216000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"H2020 Marie Sk?odowska-Curie Actions","award":["675320"],"award-info":[{"award-number":["675320"]}]},{"DOI":"10.13039\/100010669","name":"H2020 LEIT Information and Communication Technologies","doi-asserted-by":"publisher","award":["830929"],"award-info":[{"award-number":["830929"]}],"id":[{"id":"10.13039\/100010669","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,6,27]]},"DOI":"10.1145\/3377812.3390903","type":"proceedings-article","created":{"date-parts":[[2020,10,1]],"date-time":"2020-10-01T22:53:48Z","timestamp":1601592828000},"page":"284-285","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Preliminary findings on FOSS dependencies and security"],"prefix":"10.1145","author":[{"given":"Ivan","family":"Pashchenko","sequence":"first","affiliation":[{"name":"University of Trento"}]},{"given":"Duc-Ly","family":"Vu","sequence":"additional","affiliation":[{"name":"University of Trento"}]},{"given":"Fabio","family":"Massacci","sequence":"additional","affiliation":[{"name":"University of Trento"}]}],"member":"320","published-online":{"date-parts":[[2020,10]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950325"},{"key":"e_1_3_2_1_2_1","volume-title":"Proc. of ICSE'15 (ICSE '15)","author":"Cox Jo\u00ebl","year":"1900","unstructured":"Jo\u00ebl Cox , Eric Bouwers , Marko van Eekelen , and Joost Visser . 2015. Measuring Dependency Freshness in Software Systems . In Proc. of ICSE'15 (ICSE '15) . IEEE Press , Piscataway, NJ, USA , 109--118. http:\/\/dl.acm.org\/citation.cfm?id=28 1900 9.2819027 Jo\u00ebl Cox, Eric Bouwers, Marko van Eekelen, and Joost Visser. 2015. Measuring Dependency Freshness in Software Systems. In Proc. of ICSE'15 (ICSE '15). IEEE Press, Piscataway, NJ, USA, 109--118. http:\/\/dl.acm.org\/citation.cfm?id=2819009.2819027"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134059"},{"volume-title":"Applied thematic analysis","author":"Guest Greg","key":"e_1_3_2_1_4_1","unstructured":"Greg Guest , Kathleen M MacQueen , and Emily E Namey . 2011. Applied thematic analysis . Sage . Greg Guest, Kathleen M MacQueen, and Emily E Namey. 2011. Applied thematic analysis. Sage."},{"volume-title":"Proc. of EuroS&P'19","author":"Huang J.","key":"e_1_3_2_1_5_1","unstructured":"J. Huang , N. Borges , S. Bugiel , and M. Backes . 2019. Up-To-Crash: Evaluating Third-Party Library Updatability on Android . In Proc. of EuroS&P'19 . 15--30. J. Huang, N. Borges, S. Bugiel, and M. Backes. 2019. Up-To-Crash: Evaluating Third-Party Library Updatability on Android. In Proc. of EuroS&P'19. 15--30."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2013.6606613"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9521-5"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2013.43"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3268920"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2014.09.003"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330195"}],"event":{"name":"ICSE '20: 42nd International Conference on Software Engineering","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","KIISE Korean Institute of Information Scientists and Engineers","IEEE CS"],"location":"Seoul South Korea","acronym":"ICSE '20"},"container-title":["Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering: Companion Proceedings"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3377812.3390903","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3377812.3390903","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:38:42Z","timestamp":1750199922000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3377812.3390903"}},"subtitle":["a qualitative study on developers' attitudes and experience"],"short-title":[],"issued":{"date-parts":[[2020,6,27]]},"references-count":11,"alternative-id":["10.1145\/3377812.3390903","10.1145\/3377812"],"URL":"https:\/\/doi.org\/10.1145\/3377812.3390903","relation":{},"subject":[],"published":{"date-parts":[[2020,6,27]]},"assertion":[{"value":"2020-10-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}