{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,3,29]],"date-time":"2022-03-29T01:14:29Z","timestamp":1648516469204},"reference-count":8,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Inf. & Syst."],"published-print":{"date-parts":[[2022,1,1]]},"DOI":"10.1587\/transinf.2021mpl0001","type":"journal-article","created":{"date-parts":[[2021,12,31]],"date-time":"2021-12-31T22:25:09Z","timestamp":1640989509000},"page":"19-20","source":"Crossref","is-referenced-by-count":0,"title":["S\u014djiTantei: Function-Call Reachability Detection of Vulnerable Code for npm Packages"],"prefix":"10.1587","volume":"E105.D","author":[{"given":"Bodin","family":"CHINTHANET","sequence":"first","affiliation":[{"name":"Nara Institute of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raula","family":"GAIKOVINA KULA","sequence":"additional","affiliation":[{"name":"Nara Institute of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rodrigo","family":"ELIZA ZAPATA","sequence":"additional","affiliation":[{"name":"Nara Institute of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Takashi","family":"ISHIO","sequence":"additional","affiliation":[{"name":"Nara Institute of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenichi","family":"MATSUMOTO","sequence":"additional","affiliation":[{"name":"Nara Institute of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Akinori","family":"IHARA","sequence":"additional","affiliation":[{"name":"Wakayama University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"532","reference":[{"key":"1","unstructured":"[1] Heartbleed bug, http:\/\/heartbleed.com\/, 2017. (Accessed on 07\/14\/ 2021)."},{"key":"2","doi-asserted-by":"crossref","unstructured":"[2] B. Chinthanet, S.E. Ponta, H. Plate, A. Sabetta, R.G. Kula, T. Ishio, and K. Matsumoto, \u201cCode-based vulnerability detection in node.js applications: How far are we?,\u201d In Proceedings of the 35th IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp.1199-1203, 2020. 10.1145\/3324884.3421838","DOI":"10.1145\/3324884.3421838"},{"key":"3","doi-asserted-by":"crossref","unstructured":"[3] A. Decan, T. Mens, and E. Constantinou, \u201cOn the impact of security vulnerabilities in the npm package dependency network,\u201d In Proceedings of the 15th International Conference on Mining Software Repositories (MSR), pp.181-191, 2018. 10.1145\/3196398.3196401","DOI":"10.1145\/3196398.3196401"},{"key":"4","doi-asserted-by":"crossref","unstructured":"[4] J. Hejderup, A. van Deursen, and G. Gousios, \u201cSoftware Ecosystem Call Graph for Dependency Management,\u201d In Proceedings of the 40th International Conference on Software Engineering (ICSE), pp.101-104, 2018. 10.1145\/3183399.3183417","DOI":"10.1145\/3183399.3183417"},{"key":"5","doi-asserted-by":"crossref","unstructured":"[5] R. Kikas, G. Gousios, M. Dumas, and D. Pfahl, \u201cStructure and Evolution of Package Dependency Networks,\u201d In Proceedings of the 14th International Conference on Mining Software Repositories (MSR), pp.102-112, 2017. 10.1109\/msr.2017.55","DOI":"10.1109\/MSR.2017.55"},{"key":"6","doi-asserted-by":"publisher","unstructured":"[6] R.G. Kula, D.M. German, A. Ouni, T. Ishio, and K. Inoue, \u201cDo developers update their library dependencies?,\u201d Empirical Software Engineering (EMSE), vol.23, no.1, pp.384-417, 2018. 10.1007\/s10664-017-9521-5","DOI":"10.1007\/s10664-017-9521-5"},{"key":"7","doi-asserted-by":"publisher","unstructured":"[7] S.E. Ponta, H. Plate, and A. Sabetta, \u201cDetection, assessment and mitigation of vulnerabilities in open source dependencies,\u201d Empirical Software Engineering (EMSE), vol.25, pp.3175-3215, 2020. 10.1007\/s10664-020-09830-x","DOI":"10.1007\/s10664-020-09830-x"},{"key":"8","unstructured":"[8] R.E. Zapata, R.G. Kula, B. Chinthanet, T. Ishio, K. Matsumoto, and A. Ihara, \u201cTowards Smoother Library Migrations: A Look at Vulnerable Dependency Migrations at Function Level for npm JavaScript Packages,\u201d In Proceedings of the 34th International Conference on Software Maintenance and Evolution (ICSME), pp.559-563, 2018. 10.1109\/icsme.2018.00067"}],"container-title":["IEICE Transactions on Information and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E105.D\/1\/E105.D_2021MPL0001\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T04:19:20Z","timestamp":1641010760000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E105.D\/1\/E105.D_2021MPL0001\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,1,1]]},"references-count":8,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022]]}},"URL":"https:\/\/doi.org\/10.1587\/transinf.2021mpl0001","relation":{},"ISSN":["0916-8532","1745-1361"],"issn-type":[{"value":"0916-8532","type":"print"},{"value":"1745-1361","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,1,1]]},"article-number":"2021MPL0001"}}