{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:20:15Z","timestamp":1790936415480,"version":"4.1.0"},"reference-count":63,"publisher":"Association for Computing Machinery (ACM)","issue":"6","license":[{"start":{"date-parts":[[2026,5,13]],"date-time":"2026-05-13T00:00:00Z","timestamp":1778630400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["U24A20337"],"award-info":[{"award-number":["U24A20337"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Tsinghua University (Institute for Network Sciences and Cyberspace)\u2014Science City (Guangzhou) Digital Technology Group Co., Ltd."}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Softw. Eng. Methodol."],"published-print":{"date-parts":[[2026,6,30]]},"abstract":"<jats:p>\n                    Node.js owes much of its popularity to an enormous library ecosystem. While this abundance speeds development, widely varying code quality complicates efforts to assure robustness. Effective library testing is hard for two reasons: (1) dynamic typing obscures the construction of valid, complex inputs and (2) crucial internal logic is hidden behind shallow exports, making deep paths difficult to reach. Existing tools handle neither challenge well. To address these challenges and elevate library quality, we propose TypeNFuzz, a novel testing approach for Node.js libraries. TypeNFuzz integrates: (1)\n                    <jats:italic toggle=\"yes\">Type-driven Input Synthesis<\/jats:italic>\n                    : mines TypeScript declaration files to build semantically correct objects, defeating dynamic-typing ambiguities. (2)\n                    <jats:italic toggle=\"yes\">Deep Reachability Exploration<\/jats:italic>\n                    : fuzzing guided by a dynamic and type-aware object dependence graph (ODG), systematically triggering execution deep within the internal code paths to uncover deep logic. The evaluation demonstrates the effectiveness of TypeNFuzz: it achieves 1.70\u20136.74 times higher code coverage than state-of-the-art tools, directly attributed to its ability to handle complex types and penetrate deep logic. Critically, it uncovered 77 defects in popular built-in and third-party libraries, significantly contributing to improved robustness and stability.\n                  <\/jats:p>","DOI":"10.1145\/3765760","type":"journal-article","created":{"date-parts":[[2025,9,4]],"date-time":"2025-09-04T15:36:30Z","timestamp":1757000190000},"page":"1-22","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["TypeNFuzz: Dynamic Type-aware Object Dependence Graph-Guided Fuzzing for JavaScript Library Bug Discovery"],"prefix":"10.1145","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-4089-6730","authenticated-orcid":false,"given":"Yishun","family":"Zeng","sequence":"first","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5164-8356","authenticated-orcid":false,"given":"Yue","family":"Wu","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7894-8828","authenticated-orcid":false,"given":"Chao","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,5,13]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3106739","article-title":"A survey of dynamic analysis and test generation for JavaScript","volume":"50","author":"Andreasen Esben","year":"2017","unstructured":"Esben Andreasen, Liang Gong, Anders M\u00f8ller, Michael Pradel, Marija Selakovic, Koushik Sen, and Cristian-Alexandru Staicu. 2017. A survey of dynamic analysis and test generation for JavaScript. ACM Computing Surveys (CSUR) 50, 5 (2017), 1\u201336.","journal-title":"ACM Computing Surveys (CSUR)"},{"key":"e_1_3_2_3_2","volume-title":"JavaScript: Moving to ES2015","author":"Antani Ved","year":"2017","unstructured":"Ved Antani, Simon Timms, and Narayan Prusty. 2017. JavaScript: Moving to ES2015. Packt Publishing Ltd."},{"key":"e_1_3_2_4_2","unstructured":"Apple Inc. 2008. JavaScriptCore. Retrieved July 01 2025 from https:\/\/developer.apple.com\/documentation\/javascriptcore"},{"key":"e_1_3_2_5_2","volume-title":"NorthSec","author":"Arteau Olivier","year":"2018","unstructured":"Olivier Arteau. 2018. Prototype pollution attacks in Node.JS applications. In NorthSec. Olivier Arteau."},{"key":"e_1_3_2_6_2","doi-asserted-by":"crossref","first-page":"1494","DOI":"10.1145\/3510003.3510106","volume-title":"Proceedings of the 44th International Conference on Software Engineering","author":"Arteca Ellen","year":"2022","unstructured":"Ellen Arteca, Sebastian Harner, Michael Pradel, and Frank Tip. 2022. Nessie: Automatically testing Javascript Apis with asynchronous callbacks. In Proceedings of the 44th International Conference on Software Engineering, 1494\u20131505."},{"issue":"1","key":"e_1_3_2_7_2","first-page":"85","article-title":"The role of the supreme audit institution in NPM: International trend","volume":"10","author":"Azuma Nobuo","year":"2003","unstructured":"Nobuo Azuma. 2003. The role of the supreme audit institution in NPM: International trend. Government Auditing Review 10, 1 (2003), 85\u2013106.","journal-title":"Government Auditing Review"},{"key":"e_1_3_2_8_2","first-page":"1059","volume-title":"Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE)","author":"Bhuiyan Masudul Hasan Masud","year":"2023","unstructured":"Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, and Cristian-Alexandru Staicu. 2023. SecBench.js: An executable security benchmark suite for server-side JavaScript. In Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE). IEEE, 1059\u20131070."},{"key":"e_1_3_2_9_2","first-page":"257","volume-title":"Proceedings of the 28th European Conference on Object-Oriented Programming (ECOOP \u201914)","author":"Bierman Gavin","year":"2014","unstructured":"Gavin Bierman, Mart\u00edn Abadi, and Mads Torgersen. 2014. Understanding typescript. In Proceedings of the 28th European Conference on Object-Oriented Programming (ECOOP \u201914). Springer, 257\u2013281."},{"key":"e_1_3_2_10_2","doi-asserted-by":"crossref","first-page":"1101","DOI":"10.1109\/EuroSP57164.2023.00068","volume-title":"Proceedings of the 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)","author":"Cassel Darion","year":"2023","unstructured":"Darion Cassel, Wai Tuck Wong, and Limin Jia. 2023. Nodemedic: End-to-end analysis of node.js vulnerabilities with provenance graphs. In Proceedings of the 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P). IEEE, 1101\u20131127."},{"key":"e_1_3_2_11_2","volume-title":"Proceedings of the 2025 Network and Distributed System Security Symposium (NDSS \u201925)","author":"Cassel Darion","year":"2025","unstructured":"Darion Cassel, Nuno Sabino, Min-Chien Hsu, Ruben Martins, and Limin Jia. 2025. In Proceedings of the 2025 Network and Distributed System Security Symposium (NDSS \u201925), Vol. 10."},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-014-0394-9"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616610"},{"key":"e_1_3_2_14_2","volume-title":"Programming TypeScript: Making Your JavaScript Applications Scale","author":"Cherny Boris","year":"2019","unstructured":"Boris Cherny. 2019. Programming TypeScript: Making Your JavaScript Applications Scale. O\u2019Reilly Media."},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3590330"},{"key":"e_1_3_2_16_2","volume-title":"How JavaScript Works","author":"Crockford Douglas","year":"2018","unstructured":"Douglas Crockford. 2018. How JavaScript Works. Virgule-Solidus."},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236027"},{"key":"e_1_3_2_18_2","unstructured":"DefinitelyTyped Contributors. 2012. DefinitelyTyped. Retrieved December 01 2024 from https:\/\/github.com\/DefinitelyTyped\/DefinitelyTyped"},{"key":"e_1_3_2_19_2","volume-title":"Proceedings of the Network and Distributed Systems Security (NDSS) Symposium 2021","author":"Dinh Sung Ta","year":"2021","unstructured":"Sung Ta Dinh, Haehyun Cho, Kyle Martin, Adam Oest, Kyle Zeng, Alexandros Kapravelos, Gail-Joon Ahn, Tiffany Bao, Ruoyu Wang, Adam Doupe, et al. 2021. Favocado: Fuzzing the binding code of JavaScript engines using semantically correct test cases. In Proceedings of the Network and Distributed Systems Security (NDSS) Symposium 2021."},{"key":"e_1_3_2_20_2","volume-title":"JavaScript: The Definitive Guide","author":"Flanagan David","year":"2011","unstructured":"David Flanagan. 2011. JavaScript: The Definitive Guide. O\u2019Reilly Media, Inc."},{"key":"e_1_3_2_21_2","volume-title":"JavaScript","author":"Flanagan David","year":"2007","unstructured":"David Flanagan and Pasi Matilainen. 2007. JavaScript. Anaya Multimedia."},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.75"},{"key":"e_1_3_2_23_2","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1145\/2814189.2816270","volume-title":"Companion Proceedings of the 2015 ACM SIGPLAN International Conference on Systems, Programming, Languages and Applications: Software for Humanity","author":"Gavrin Evgeny","year":"2015","unstructured":"Evgeny Gavrin, Sung-Jae Lee, Ruben Ayrapetyan, and Andrey Shitov. 2015. Ultra lightweight JavaScript engine for Internet of Things. In Companion Proceedings of the 2015 ACM SIGPLAN International Conference on Systems, Programming, Languages and Applications: Software for Humanity, 19\u201320."},{"key":"e_1_3_2_24_2","unstructured":"Google V8 Team. 2008. V8 JavaScript Engine. Retrieved from December 01 2024 https:\/\/v8.dev\/"},{"key":"e_1_3_2_25_2","volume-title":"Proceedings of the Network and Distributed Systems Security (NDSS) Symposium 2023","author":"Gro\u00df Samuel","year":"2023","unstructured":"Samuel Gro\u00df, Simon Koch, Lukas Bernhard, Thorsten Holz, and Martin Johns. 2023. FUZZILLI: Fuzzing for JavaScript JIT compiler vulnerabilities. In Proceedings of the Network and Distributed Systems Security (NDSS) Symposium 2023."},{"key":"e_1_3_2_26_2","volume-title":"Proceedings of the Network and Distributed Systems Security Symposium 2019.","author":"Han HyungSeok","year":"2019","unstructured":"HyungSeok Han, DongHyeon Oh, and Sang Kil Cha. 2019. CodeAlchemist: Semantics-aware code generation to find vulnerabilities in JavaScript engines. In Proceedings of the Network and Distributed Systems Security Symposium 2019."},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2983977"},{"key":"e_1_3_2_28_2","unstructured":"Hypothesis Project. 2008. Hypothesis. Retrieved July 01 2025 from https:\/\/hypothesis.readthedocs.io\/en\/latest\/"},{"key":"e_1_3_2_29_2","doi-asserted-by":"crossref","first-page":"238","DOI":"10.1007\/978-3-642-03237-0_17","volume-title":"Proceedings of the International Static Analysis Symposium","author":"Jensen Simon Holm","year":"2009","unstructured":"Simon Holm Jensen, Anders M\u00f8ller, and Peter Thiemann. 2009. Type analysis for JavaScript. In Proceedings of the International Static Analysis Symposium. Springer, 238\u2013255."},{"key":"e_1_3_2_30_2","volume-title":"Proceedings of the Network & Distributed System Security Symposium","author":"Kang Zifeng","year":"2022","unstructured":"Zifeng Kang, Song Li, and Yinzhi Cao. 2022. Probe the proto: Measuring client-side prototype pollution vulnerabilities of one million real-world websites. In Proceedings of the Network & Distributed System Security Symposium."},{"key":"e_1_3_2_31_2","first-page":"219","volume-title":"Proceedings of the Annual IEEE\/ACM International Symposium on Code Generation and Optimization","author":"Kashyap Vineeth","year":"2014","unstructured":"Vineeth Kashyap and Ben Hardekopf. 2014. Security signature inference for Javascript-based browser addons. In Proceedings of the Annual IEEE\/ACM International Symposium on Code Generation and Optimization, 219\u2013229."},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-020-00537-0"},{"key":"e_1_3_2_33_2","doi-asserted-by":"crossref","first-page":"917","DOI":"10.1145\/3488932.3497769","volume-title":"Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","author":"Kluban Maryna","year":"2022","unstructured":"Maryna Kluban, Mohammad Mannan, and Amr Youssef. 2022. On measuring vulnerable Javascript functions in the wild. In Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security, 917\u2013930."},{"key":"e_1_3_2_34_2","unstructured":"Tobias Lauinger Abdelberi Chaabane Sajjad Arshad William Robertson Christo Wilson Engin Kirda. 2020. Thou shalt not depend on me: Analysing the use of outdated Javascript libraries on the web. arXiv:1811.00918. Retrieved from https:\/\/arxiv.org\/abs\/1811.00918"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831189"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468542"},{"key":"e_1_3_2_37_2","first-page":"143","volume-title":"Proceedings of the 31st USENIX Security Symposium (USENIX Security \u201922)","author":"Li Song","year":"2022","unstructured":"Song Li, Mingqing Kang, Jianwei Hou, Yinzhi Cao. 2022. Mining Node.js vulnerabilities via object dependence graph and query. In Proceedings of the 31st USENIX Security Symposium (USENIX Security \u201922), 143\u2013160."},{"key":"e_1_3_2_38_2","unstructured":"Aixin Liu Bei Feng Bing Xue Bingxuan Wang Bochao Wu Chengda Lu Chenggang Zhao Chengqi Deng Chenyu Zhang Chong Ruan et al. 2024. Deepseek-v3 technical report. arXiv:2412.19437. Retrieved from https:\/\/arxiv.org\/abs\/2412.19437"},{"key":"e_1_3_2_39_2","first-page":"1","volume-title":"Proceedings of the 3rd International Symposium on Advanced Security on Software and Systems","author":"Liu Zian","year":"2023","unstructured":"Zian Liu, Chao Chen, Ejaz Ahmed, Jun Zhang, and Dongxi Liu. 2023. WinkFuzz: Model-based script synthesis for fuzzing. In Proceedings of the 3rd International Symposium on Advanced Security on Software and Systems, 1\u201312."},{"key":"e_1_3_2_40_2","unstructured":"TypeScript Team (Microsoft). 2012. TypeScript: JavaScript with syntax for types. Retrieved December 01 2024 from https:\/\/www.typescriptlang.org\/"},{"key":"e_1_3_2_41_2","unstructured":"Mozilla. 1996. SpiderMonkey JavaScript engine. Retrieved December 01 2024 from https:\/\/spidermonkey.dev\/"},{"key":"e_1_3_2_42_2","first-page":"1683","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921)","author":"Nagy Stefan","year":"2021","unstructured":"Stefan Nagy, Anh Nguyen-Tuong, Jason D. Hiser, Jack W. Davidson, and Matthew Hicks. 2021. Breaking through binaries: Compiler-quality instrumentation for better binary-only fuzzing. In Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921), 1683\u20131700."},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338933"},{"key":"e_1_3_2_44_2","unstructured":"Node.js. 2009. Node.js. Retrieved July 07 2025 from https:\/\/nodejs.org\/en\/"},{"key":"e_1_3_2_45_2","unstructured":"npm Inc. 2009. npm: Package manager for JavaScript. Retrieved December 01 2024 from https:\/\/www.npmjs.com\/"},{"key":"e_1_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2013.18"},{"key":"e_1_3_2_47_2","first-page":"1","volume-title":"Proceedings of the 2013 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO)","author":"Pienaar Jacques A.","year":"2013","unstructured":"Jacques A. Pienaar and Robert Hundt. 2013. JSWhiz: Static analysis for JavaScript memory leaks. In Proceedings of the 2013 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 1\u201311."},{"key":"e_1_3_2_48_2","first-page":"314","volume-title":"In Proceedings of the 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering","volume":"1","author":"Pradel Michael","year":"2015","unstructured":"Michael Pradel, Parker Schuh, and Koushik Sen. 2015. TypeDevil: Dynamic type inconsistency analysis for JavaScript. In Proceedings of the 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering. Vol. 1, IEEE, 314\u2013324."},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/1806596.1806598"},{"key":"e_1_3_2_50_2","article-title":"An empirical evaluation of using large language models for automated unit test generation","author":"Sch\u00e4fer Max","year":"2023","unstructured":"Max Sch\u00e4fer, Sarah Nadi, Aryaz Eghbali, and Frank Tip. 2023. An empirical evaluation of using large language models for automated unit test generation. IEEE Transactions on Software Engineering (2023).","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"2","key":"e_1_3_2_51_2","first-page":"73","article-title":"Node.js challenges in implementation","volume":"17","author":"Shah Hezbullah","year":"2017","unstructured":"Hezbullah Shah and Tariq Rahim Soomro. 2017. Node.js challenges in implementation. Global Journal of Computer Science and Technology 17, 2 (2017), 73\u201383.","journal-title":"Global Journal of Computer Science and Technology"},{"key":"e_1_3_2_52_2","first-page":"5521","volume-title":"Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923)","author":"Shcherbakov Mikhail","year":"2023","unstructured":"Mikhail Shcherbakov, Musard Balliu, and Cristian-Alexandru Staicu. 2023. Silent Spring: Prototype pollution leads to remote code execution in Node.js. In Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923), 5521\u20135538."},{"key":"e_1_3_2_53_2","unstructured":"Simform. 2021. Companies using Node.js. Retrieved July 01 2025 from https:\/\/www.simform.com\/blog\/companies-using-nodejs\/"},{"key":"e_1_3_2_54_2","first-page":"602","volume-title":"Proceedings of the 16th International Conference on Computational Science and Its Applications (ICCSA \u201916)","author":"Sin Dongig","year":"2016","unstructured":"Dongig Sin and Dongkun Shin. 2016. Performance and resource analysis on the Javascript runtime for IoT devices. In Proceedings of the 16th International Conference on Computational Science and Its Applications (ICCSA \u201916). Springer, 602\u2013609."},{"key":"e_1_3_2_55_2","unstructured":"Snyk. 2017. 77% of sites use vulnerable JavaScript libraries. Retrieved July 01 2025 from https:\/\/snyk.io\/blog\/77-percent-of-sites-use-vulnerable-js-libraries\/"},{"key":"e_1_3_2_56_2","first-page":"361","volume-title":"Proceedings of the 27th USENIX Security Symposium (USENIX Security \u201918)","author":"Staicu Cristian-Alexandru","year":"2018","unstructured":"Cristian-Alexandru Staicu and Michael Pradel. 2018. Freezing the web: A study of {ReDoS} vulnerabilities in {JavaScript-based} web servers. In Proceedings of the 27th USENIX Security Symposium (USENIX Security \u201918), 361\u2013376."},{"key":"e_1_3_2_57_2","unstructured":"NPM Trends. 2013. TypeScript download trends on npmtrends. Retrieved December 01 2024 from https:\/\/npmtrends.com\/typescript"},{"key":"e_1_3_2_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/3691620.3695549"},{"key":"e_1_3_2_59_2","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2334"},{"key":"e_1_3_2_60_2","doi-asserted-by":"crossref","unstructured":"Philip Welsby and Bernard M. Y. Cheung. 2023. ChatGPT. Postgraduate Medical Journal 99 1176 (2023) 1047\u20131048.","DOI":"10.1093\/postmj\/qgad056"},{"key":"e_1_3_2_61_2","first-page":"1","volume-title":"Proceedings of the ACM on Programming Languages","volume":"4","author":"Wirfs-Brock Allen","year":"2020","unstructured":"Allen Wirfs-Brock and Brendan Eich. 2020. JavaScript: The first 20 years. Proceedings of the ACM on Programming Languages 4, HOPL (2020), 1\u2013189."},{"key":"e_1_3_2_62_2","first-page":"1","volume-title":"Proceedings of the ACM on Programming Languages","volume":"4","author":"Xiang Tongtong","year":"2020","unstructured":"Tongtong Xiang, Jeff Y. Luo, and Werner Dietl. 2020. Precise inference of expressive units of measurement types. Proceedings of the ACM on Programming Languages 4, OOPSLA (2020), 1\u201328."},{"key":"e_1_3_2_63_2","first-page":"170","volume-title":"Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems","volume":"4","author":"Ye Chengfeng","year":"2024","unstructured":"Chengfeng Ye, Yuandao Cai, Anshunkang Zhou, Heqing Huang, Hao Ling, and Charles Zhang. 2024. Manta: Hybrid-Sensitive type inference toward type-assisted bug detection for stripped binaries. In Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Vol. 4, 170\u2013187."},{"key":"e_1_3_2_64_2","volume-title":"Understanding ECMAScript 6: The Definitive Guide for JavaScript Developers","author":"Zakas Nicholas C.","year":"2016","unstructured":"Nicholas C. Zakas. 2016. Understanding ECMAScript 6: The Definitive Guide for JavaScript Developers. No Starch Press."}],"container-title":["ACM Transactions on Software Engineering and Methodology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3765760","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T02:32:53Z","timestamp":1778725973000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3765760"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,13]]},"references-count":63,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2026,6,30]]}},"alternative-id":["10.1145\/3765760"],"URL":"https:\/\/doi.org\/10.1145\/3765760","relation":{},"ISSN":["1049-331X","1557-7392"],"issn-type":[{"value":"1049-331X","type":"print"},{"value":"1557-7392","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,13]]},"assertion":[{"value":"2025-02-25","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-08-20","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}