English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Third-party libraries are a central building block to develop softwaresystems. However, outdated third-party libraries are commonly used, anddevelopers are usually less aware of the potential risks. Therefore, aquantitative and holistic study on usages, updates and risks of third-partylibraries can provide practical insights to improve the ecosystem sustainably.In this paper, we conduct such a study in the Java ecosystem. Specifically, weconduct a library usage analysis (e.g., usage intensity and outdatedness) and alibrary update analysis (e.g., update intensity and delay) using 806open-source projects. The two analyses aim to quantify usage and updatepractices holistically from the perspective of both open-source projects andthird-party libraries. Then, we conduct a library risk analysis (e.g.,potential risk and developer response) in terms of bugs with 15 popularly-usedthird-party libraries. This analysis aims to quantify the potential risk ofusing outdated libraries and the developer response to the risk. Our findingsfrom the three analyses provide practical insights to developers andresearchers on problems and potential solutions in maintaining third-partylibraries (e.g., smart alerting and automated updating of outdated libraries).To demonstrate the usefulness of our findings, we propose a bug-driven alertingsystem for assisting developers to make confident decisions in updatingthird-party library versions. We have released our dataset to foster valuableapplications and improve the ecosystem.

An Empirical Study of Usages, Updates and Risks of Third-Party Libraries in Java Projects