{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:58:44Z","timestamp":1750309124763,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T00:00:00Z","timestamp":1712880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,12]]},"DOI":"10.1145\/3597503.3639221","type":"proceedings-article","created":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T16:43:26Z","timestamp":1712940206000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["ModuleGuard: Understanding and Detecting Module Conflicts in Python Ecosystem"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-5181-4797","authenticated-orcid":false,"given":"Ruofan","family":"Zhu","sequence":"first","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9988-8065","authenticated-orcid":false,"given":"Xingyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1175-2753","authenticated-orcid":false,"given":"Chengwei","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8390-7518","authenticated-orcid":false,"given":"Zhengzi","family":"Xu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2899-6121","authenticated-orcid":false,"given":"Wenbo","family":"Shen","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0178-0171","authenticated-orcid":false,"given":"Rui","family":"Chang","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7300-9215","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,4,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Adafruit-Blinka. 2023. Retrieved March 10 2023 from https:\/\/pypi.org\/project\/Adafruit-Blinka\/"},{"key":"e_1_3_2_1_2_1","unstructured":"albumentations team. 2022. Retrieved March 10 2023 from https:\/\/github.com\/albumentations-team\/albumentations\/issues\/841"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER50967.2021.00048"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_4_1","unstructured":"bandersnatch developers. 2022. bandersnatch. Retrieved March 10, 2023 from https:\/\/bandersnatch.readthedocs.io\/en\/latest\/"},{"key":"e_1_3_2_1_5_1","unstructured":"board. 2023. Retrieved March 10 2023 from https:\/\/pypi.org\/project\/board\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3191353"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510078"},{"key":"e_1_3_2_1_8_1","unstructured":"conda. 2023. . Retrieved January 10 2023 from https:\/\/conda.io\/"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_9_1","unstructured":"crates.io. 2022. cargo. Retrieved March 10, 2023 from https:\/\/crates.io\/"},{"key":"e_1_3_2_1_10_1","volume-title":"Ryan Elder, Brendan Saltaformaggio, and Wenke Lee.","author":"Duan Ruian","year":"2020","unstructured":"Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi, Ryan Elder, Brendan Saltaformaggio, and Wenke Lee. 2020. Towards measuring supply chain attacks on package managers for interpreted languages. arXiv preprint arXiv:2002.01139 (2020)."},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_11_1","unstructured":"dylanhogg. 2022. Python Awesome Project. Retrieved March 10, 2023 from https:\/\/awesomepython.org\/"},{"key":"e_1_3_2_1_12_1","volume-title":"Retrieved","author":"Foundation Python Software","year":"2022","unstructured":"Python Software Foundation. 2022. api-reference. Retrieved March 10, 2023 from https:\/\/warehouse.pypa.io\/api-reference\/xml-rpc.html"},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","author":"Foundation Python Software","year":"2022","unstructured":"Python Software Foundation. 2022. opencv-python. Retrieved March 10, 2023 from https:\/\/pypi.org\/project\/opencv-python\/"},{"key":"e_1_3_2_1_14_1","volume-title":"Retrieved","author":"Foundation Python Software","year":"2022","unstructured":"Python Software Foundation. 2022. Python Dependency Specifiers. Retrieved March 10, 2023 from https:\/\/packaging.python.org\/en\/latest\/specifications\/dependency-specifiers\/"},{"key":"e_1_3_2_1_15_1","volume-title":"Retrieved","author":"Foundation Python Software","year":"2022","unstructured":"Python Software Foundation. 2022. Python Documentation. Retrieved March 10, 2023 from https:\/\/docs.python.org\/3\/"},{"key":"e_1_3_2_1_16_1","volume-title":"Retrieved","author":"Foundation Python Software","year":"2022","unstructured":"Python Software Foundation. 2022. Python Standard Libraries Documentation. Retrieved March 10, 2023 from https:\/\/docs.python.org\/3.10\/library\/index.html"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_17_1","unstructured":"Google. 2022. deps.dev. Retrieved March 10, 2023 from https:\/\/deps.dev\/"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_18_1","unstructured":"Google. 2022. PyPI downloads table. Retrieved March 10, 2023 from https:\/\/bigquery.cloud.google.com\/table\/bigquery-public-data:pypi.downloads"},{"key":"e_1_3_2_1_19_1","volume-title":"An Empirical Study of Malicious Code In PyPI Ecosystem. In 2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 166--177","author":"Guo Wenbo","year":"2023","unstructured":"Wenbo Guo, Zhengzi Xu, Chengwei Liu, Cheng Huang, Yong Fang, and Yang Liu. 2023. An Empirical Study of Malicious Code In PyPI Ecosystem. In 2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 166--177."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00047"},{"key":"e_1_3_2_1_21_1","volume-title":"Taxonomy of attacks on open-source software supply chains. arXiv preprint arXiv:2204.04008","author":"Ladisa Piergiorgio","year":"2022","unstructured":"Piergiorgio Ladisa, Henrik Plate, Matias Martinez, and Olivier Barais. 2022. Taxonomy of attacks on open-source software supply chains. arXiv preprint arXiv:2204.04008 (2022)."},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_22_1","unstructured":"lambdaloop. 2022. aniposelib. Retrieved March 10, 2023 from https:\/\/github.com\/lambdaloop\/anipose\/issues\/22"},{"key":"e_1_3_2_1_23_1","unstructured":"LarsVoelker. 2022. Retrieved March 10 2023 from https:\/\/github.com\/LarsVoelker\/FibexConverter\/issues\/7"},{"key":"e_1_3_2_1_24_1","unstructured":"Shuo Li. [n. d.]. EasyPip: Detect and Fix Dependency Problems in Python Dependency Declaration Files. ([n. d.])."},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_25_1","unstructured":"Libraries.io. 2022. Libraries.io Query. Retrieved March 10, 2023 from https:\/\/libraries.io\/search?order=desc&platforms=PyPI"},{"key":"e_1_3_2_1_26_1","unstructured":"Maven. 2021. Maven - Guide to Naming Conventions. https:\/\/maven.apache.org\/guides\/mini\/guide-naming-conventions.html Accessed: 2022-01-19."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464797"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_28_1","unstructured":"opendatateam. 2022. Cookiecutter-udata-plugin issue. Retrieved March 10, 2023 from https:\/\/github.com\/opendatateam\/cookiecutter-udata-plugin\/issues\/3"},{"volume-title":"Retrieved","year":"2023","key":"e_1_3_2_1_29_1","unstructured":"pip. 2023. pip documentation v22.3.1. Retrieved March 10, 2023 from https:\/\/pip.pypa.io\/"},{"key":"e_1_3_2_1_30_1","unstructured":"poetry. 2023. . Retrieved January 10 2023 from https:\/\/python-poetry.org\/docs\/repositories\/"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_31_1","unstructured":"pycrypto. 2022. Pycrypto issue. Retrieved March 10, 2023 from https:\/\/github.com\/pycrypto\/pycrypto\/issues\/156"},{"key":"e_1_3_2_1_32_1","unstructured":"pypa. 2022. Retrieved March 10 2023 from https:\/\/github.com\/pypa\/pip\/issues\/4625"},{"key":"e_1_3_2_1_33_1","unstructured":"pypa. 2022. Retrieved March 10 2023 from https:\/\/github.com\/pypa\/pip\/issues\/8509"},{"volume-title":"Retrieved","year":"2023","key":"e_1_3_2_1_34_1","unstructured":"pypa. 2023. Package Discovery and Namespace Packages. Retrieved January 10, 2023 from https:\/\/setuptools.pypa.io\/en\/latest\/userguide\/package_discovery.html"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_35_1","unstructured":"radekd91. 2022. Emoca issue. Retrieved March 10, 2023 from https:\/\/github.com\/radekd91\/emoca\/issues\/44"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/PST52912.2021.9647791"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_37_1","unstructured":"sarugaku. 2022. resolvelib. Retrieved March 10, 2023 from https:\/\/github.com\/sarugaku\/resolvelib"},{"key":"e_1_3_2_1_38_1","volume-title":"Retrieved","author":"Smith Jessamyn","year":"2023","unstructured":"Jessamyn Smith. 2023. pipreq. Retrieved March 10, 2023 from https:\/\/github.com\/bndr\/pipreqs\/"},{"volume-title":"State of the 2021 Software Supply Chain. Sonatype Blog","year":"2021","key":"e_1_3_2_1_39_1","unstructured":"Sonatype. 2021. State of the 2021 Software Supply Chain. Sonatype Blog (2021). https:\/\/www.sonatype.com\/blog\/software-supply-chain-2021"},{"key":"e_1_3_2_1_40_1","volume-title":"Retrieved","author":"TIDELIFT.","year":"2022","unstructured":"TIDELIFT. 2022. Libraries.io. Retrieved March 10, 2023 from https:\/\/libraries.io\/"},{"volume-title":"d.]. Retrieved","year":"2023","key":"e_1_3_2_1_41_1","unstructured":"virtualenv [n. d.]. Retrieved March 10, 2023 from https:\/\/virtualenv.pypa.io\/"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00074"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/eurospw51379.2020.00074"},{"key":"e_1_3_2_1_44_1","volume-title":"Smart-Pip: A Smart Approach to Resolving Python Dependency Conflict Issues","author":"Wang Chao","year":"2022","unstructured":"Chao Wang, Rongxin Wu, Haohao Song, Jiwu Shu, and Guoqing Li. 2022. Smart-Pip: A Smart Approach to Resolving Python Dependency Conflict Issues. IEEE Transactions on Software Engineering (2022)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00144"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380426"},{"volume-title":"Retrieved","year":"2023","key":"e_1_3_2_1_47_1","unstructured":"Wikipedia. 2023. Identifier. Retrieved March 10, 2023 from https:\/\/en.wikipedia.org\/wiki\/Identifier#Implicit_context_and_namespace_conflicts"},{"volume-title":"Retrieved","year":"2022","key":"e_1_3_2_1_48_1","unstructured":"wtsi hgi. 2022. Python-hgijson issue. Retrieved March 10, 2023 from https:\/\/github.com\/wtsi-hgi\/python-hgijson\/issues\/14"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510127"},{"key":"e_1_3_2_1_50_1","unstructured":"ysr monitor. 2023. Retrieved March 10 2023 from https:\/\/pypi.org\/project\/ysr-monitor\/"}],"event":{"name":"ICSE '24: IEEE\/ACM 46th International Conference on Software Engineering","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"],"location":"Lisbon Portugal","acronym":"ICSE '24"},"container-title":["Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639221","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597503.3639221","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:13Z","timestamp":1750286953000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639221"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,12]]},"references-count":50,"alternative-id":["10.1145\/3597503.3639221","10.1145\/3597503"],"URL":"https:\/\/doi.org\/10.1145\/3597503.3639221","relation":{},"subject":[],"published":{"date-parts":[[2024,4,12]]},"assertion":[{"value":"2024-04-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}