{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,15]],"date-time":"2026-03-15T23:03:57Z","timestamp":1773615837503,"version":"3.50.1"},"reference-count":24,"publisher":"Allerton Press","issue":"8","license":[{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Aut. Control Comp. Sci."],"published-print":{"date-parts":[[2023,12]]},"DOI":"10.3103\/s0146411623080059","type":"journal-article","created":{"date-parts":[[2024,2,29]],"date-time":"2024-02-29T15:02:20Z","timestamp":1709218940000},"page":"938-946","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Risk Assessment of Using Open Source Projects: Analysis of the Existing Approaches"],"prefix":"10.3103","volume":"57","author":[{"given":"M. A.","family":"Eremeev","sequence":"first","affiliation":[]},{"given":"I. I.","family":"Zakharchuk","sequence":"additional","affiliation":[]}],"member":"1627","published-online":{"date-parts":[[2024,2,29]]},"reference":[{"key":"7654_CR1","doi-asserted-by":"publisher","unstructured":"Musseau, J., Meyers, J.S., Sieniawski, G.P., Thompson, C.A., and German, D., Is open source eating the world\u2019s software?, Proceedings of the 19th Int. Conf. on Mining Software Repositories, Pittsburgh, Pa., 2022, New York: Association for Computing Machinery, 2022, vol. 561, p. 565. https:\/\/doi.org\/10.1145\/3524842.3528473","DOI":"10.1145\/3524842.3528473"},{"key":"7654_CR2","doi-asserted-by":"publisher","unstructured":"Qiu, H.S., Li, Yu.L., Padala, S., Sarma, A., and Vasilescu, B., The signals that potential contributors look for when choosing open-source projects, Proc. ACM Hum.-Comput. Interaction, 2019, vol. 3, no. CSCW, pp. 1\u201329. https:\/\/doi.org\/10.1145\/3359224","DOI":"10.1145\/3359224"},{"key":"7654_CR3","doi-asserted-by":"publisher","first-page":"243","DOI":"10.1007\/s11334-014-0231-5","volume":"10","author":"A.S. Barb","year":"2014","unstructured":"Barb, A.S., Neill, C.J., Sangwan, R.S., and Piovoso, M.J., A statistical study of the relevance of lines of code measures in software projects, Innovations Syst. Software Eng., 2014, vol. 10, no. 4, pp. 243\u2013260. https:\/\/doi.org\/10.1007\/s11334-014-0231-5","journal-title":"Innovations Syst. Software Eng."},{"key":"7654_CR4","doi-asserted-by":"publisher","first-page":"895","DOI":"10.1016\/j.jss.2011.11.010","volume":"85","author":"V. Midha","year":"2012","unstructured":"Midha, V. and Palvia, P., Factors affecting the success of open source software, J. Syst. Software, 2012, vol. 85, no. 4, pp. 895\u2013905. https:\/\/doi.org\/10.1016\/j.jss.2011.11.010","journal-title":"J. Syst. Software"},{"key":"7654_CR5","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1016\/j.infsof.2015.10.002","volume":"70","author":"K. Blincoe","year":"2015","unstructured":"Blincoe, K., Sheoran, J., Goggins, S., Petakovic, E., and Damian, D., Understanding the popular users: Following, affiliation influence and leadership on GitHub, Inf. Software Technol., 2015, vol. 70, pp. 30\u201339. https:\/\/doi.org\/10.1016\/j.infsof.2015.10.002","journal-title":"Inf. Software Technol."},{"key":"7654_CR6","doi-asserted-by":"publisher","unstructured":"Casalnuovo, C., Vasilescu, B., Devanbu, P., and Filkov, V., Developer onboarding in GitHub: The role of prior social links and language experience, Proc. 2015 10th Joint Meeting on Foundations of Software Engineering, Bergamo, Italy, 2015, New York: Association for Computing Machinery, 2015, pp. 817\u2013828. https:\/\/doi.org\/10.1145\/2786805.2786854","DOI":"10.1145\/2786805.2786854"},{"key":"7654_CR7","doi-asserted-by":"publisher","unstructured":"Coelho, J. and Valente, M.T., Why modern open source projects fail, Proc. 2017 11th Joint Meeting on Foundations of Software Engineering, Paderborn, Germany, 2017, New York: Association for Computing Machinery, 2017, pp. 186\u2013196. https:\/\/doi.org\/10.1145\/3106237.3106246","DOI":"10.1145\/3106237.3106246"},{"key":"7654_CR8","doi-asserted-by":"publisher","unstructured":"Cox, J., Bouwers, E., Eekelen, M.V., and Visser, J., Measuring dependency freshness in software systems, 2015 IEEE\/ACM 37th IEEE Int. Conf. on Software Engineering, Florence, Italy, 2015, IEEE, 2015, pp. 109\u2013118. https:\/\/doi.org\/10.1109\/icse.2015.140","DOI":"10.1109\/icse.2015.140"},{"key":"7654_CR9","doi-asserted-by":"publisher","unstructured":"Hilton, M., Tunnell, T., Huang, K., Marinov, D., and Dig, D., Usage, costs, and benefits of continuous integration in open-source projects, Proc. 31st IEEE\/ACM Int. Conf. on Automated Software Engineering, Singapore, 2016, New York: Association for Computing Machinery, 2016, pp. 426\u2013437. https:\/\/doi.org\/10.1145\/2970276.2970358","DOI":"10.1145\/2970276.2970358"},{"key":"7654_CR10","doi-asserted-by":"publisher","unstructured":"Joblin, M., Apel, S., Hunsen, C., and Mauerer, W., Classifying developers into core and peripheral: An empirical study on count and network metrics, 2017 IEEE\/ACM 39th International Conference on Software Engineering (ICSE), Buenos Aires, 2017, IEEE, 2017, vol. 39, pp. 164\u2013174. https:\/\/doi.org\/10.1109\/icse.2017.23","DOI":"10.1109\/icse.2017.23"},{"key":"7654_CR11","doi-asserted-by":"publisher","unstructured":"Trockman, A., Adding sparkle to social coding: An empirical study of repository badges in the npm ecosystem, Proc. 40th Int. Conf. on Software Engineering: Companion Proc., Gothenburg, Sweden, 2018, New York: Association for Computing Machinery, 2018, pp. 524\u2013526. https:\/\/doi.org\/10.1145\/3183440.3190335","DOI":"10.1145\/3183440.3190335"},{"key":"7654_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45672-4_31","volume-title":"Refactoring: Improving the design of existing code, Extreme Programming and Agile Methods\u2014XP\/Agile Universe 2002","author":"M. Fowler","year":"2012","unstructured":"Fowler, M., Refactoring: Improving the design of existing code, Extreme Programming and Agile Methods\u2014XP\/Agile Universe 2002, Wells, D. and Williams, L., Eds., Lecture Notes in Computer Science, vol. 2418, Berlin: Springer, 2012, pp. 256\u2013256. https:\/\/doi.org\/10.1007\/3-540-45672-4_31"},{"key":"7654_CR13","doi-asserted-by":"publisher","unstructured":"Bibiano, A.C., Fernandes, E., Oliveira, D., Garcia, A., Kalinowski, M., Fonseca, B., Oliveira, R., Oliveira, A., and Cedrim, D., A quantitative study on characteristics and effect of batch refactoring on code smells, 2019 ACM\/IEEE Int. Symp. on Empirical Software Engineering and Measurement (ESEM), Porto de Galinhas, Brazil, 2019, IEEE, 2019, vol. 1, p. 11. https:\/\/doi.org\/10.1109\/esem.2019.8870183","DOI":"10.1109\/esem.2019.8870183"},{"key":"7654_CR14","unstructured":"R\u00eago, D.C.G., Understanding and improving batch refactoring in software systems, PhD Thesis, Rio de Janeiro: Pontificia Universidade Catolica do Rio de Janeiro, 2018."},{"key":"7654_CR15","doi-asserted-by":"publisher","unstructured":"Fernandes, E., Uchoa, A., Bibiano, A.C., and Garcia, A., On the alternatives for composing batch refactoring, 2019 IEEE\/ACM 3rd Int. Workshop on Refactoring (IWoR), Montreal, 2019, IEEE, 2019, pp. 9\u201312. https:\/\/doi.org\/10.1109\/iwor.2019.00009","DOI":"10.1109\/iwor.2019.00009"},{"key":"7654_CR16","doi-asserted-by":"publisher","unstructured":"Niu, F., Assun\u00e7\u00e3o, W.K.G., Huang, L., Mayr-Dorn, C., Ge, J., Luo, B., and Egyed, A., RAT: A refactoring-aware traceability model for bug localization, 2023 IEEE\/ACM 45th Int. Conf. on Software Engineering (ICSE), Melbourne, Australia, 2023, IEEE, 2023, pp. 196\u2013207. https:\/\/doi.org\/10.1109\/icse48619.2023.00028","DOI":"10.1109\/icse48619.2023.00028"},{"key":"7654_CR17","doi-asserted-by":"publisher","unstructured":"Brito, A., Hora, A., and Valente, M.T., Refactoring graphs: Assessing refactoring over time, 2020 IEEE 27th Int. Conf. on Software Analysis, Evolution and Reengineering (SANER), London, Canada, 2020, IEEE, 2020, pp.\u00a0367\u2013377. https:\/\/doi.org\/10.1109\/saner48275.2020.9054864","DOI":"10.1109\/saner48275.2020.9054864"},{"key":"7654_CR18","unstructured":"Mr\u00f3wka, R., Decision-making in the process of implementation of open source projects, 2012, vol. 2, no. 2. https:\/\/www.proquest.com\/scholarly-journals\/decision-making-process-implementation-open\/docview\/ 1426666281\/se-2."},{"key":"7654_CR19","doi-asserted-by":"publisher","first-page":"484","DOI":"10.17705\/1CAIS.04620","volume":"46","author":"U.Ye. Eseryel","year":"2020","unstructured":"Eseryel, U.Ye., Wie, K., and Crowston, K., Decision-making processes in community-based free\/libre open source software-development teams with internal governance: An extension to decision-making theory, Commun. Assoc. Inf. Syst., 2020, vol. 46, pp. 484\u2013510. https:\/\/doi.org\/10.17705\/1CAIS.04620","journal-title":"Commun. Assoc. Inf. Syst."},{"key":"7654_CR20","doi-asserted-by":"publisher","first-page":"2312","DOI":"10.1002\/spe.3128","volume":"52","author":"P. Nand Sharma","year":"2022","unstructured":"Nand Sharma, P., Tony Roy Savarimuthu, B., and Stanger, N., Unearthing open source decision-making processes: A case study of Python enhancement proposals, Software: Pract. Exper., 2022, vol. 52, no. 10, pp. 2312\u20132346. https:\/\/doi.org\/10.1002\/spe.3128","journal-title":"Software: Pract. Exper."},{"key":"7654_CR21","volume-title":"CMMI for development, version 1.2","author":"CMMI Product Team et al","year":"2006","unstructured":"CMMI Product Team et al., CMMI for development, version 1.2, Pittsburgh: Software Engineering Institute, 2006."},{"key":"7654_CR22","volume-title":"CMMI for Development: Guidelines for Process Integration and Product Improvement","author":"M. Chrissis","year":"2011","unstructured":"Chrissis, M., Konrad, M., and Shrum, S., CMMI for Development: Guidelines for Process Integration and Product Improvement, Pearson Education, 2011."},{"key":"7654_CR23","doi-asserted-by":"crossref","unstructured":"Wen, Sh.-F., Software security in open source development: A systematic literature review, 21st Conf. of Open Innovations Association (FRUCT), Helsinki, Finland, 2017, IEEE, 2017, pp. 364\u2013373.","DOI":"10.23919\/FRUCT.2017.8250205"},{"key":"7654_CR24","doi-asserted-by":"publisher","unstructured":"Ramirez, A., Aiello, A., and Lincke, S.J., A survey and comparison of secure software development standards, 2020 13th CMI Conf. on Cybersecurity and Privacy (CMI)-Digital Transformation-Potentials and Challenges(51275), Copenhagen, 2020, IEEE, 2020, pp. 1\u20136. https:\/\/doi.org\/10.1109\/cmi51275.2020.9322704","DOI":"10.1109\/cmi51275.2020.9322704"}],"container-title":["Automatic Control and Computer Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.3103\/S0146411623080059.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.3103\/S0146411623080059","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.3103\/S0146411623080059.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,15]],"date-time":"2026-03-15T22:05:20Z","timestamp":1773612320000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.3103\/S0146411623080059"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12]]},"references-count":24,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2023,12]]}},"alternative-id":["7654"],"URL":"https:\/\/doi.org\/10.3103\/s0146411623080059","relation":{},"ISSN":["0146-4116","1558-108X"],"issn-type":[{"value":"0146-4116","type":"print"},{"value":"1558-108X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12]]},"assertion":[{"value":"10 June 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 June 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 July 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 February 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors of this work declare that they have no conflicts of interest.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"CONFLICT OF INTEREST"}}]}}