A 635,003-artifact Maven study reports that zero-dependency artifacts have comparable popularity and fewer CVEs, but the CVE comparison ignores 12x group-size differences and the zero-propagation result is true by definition.
On the untriviality of trivial packages: An empirical study of npm javascript packages,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.SE 1years
2025 1verdicts
REJECT 1representative citing papers
citing papers explorer
-
Dependency Dilemmas: A Comparative Study of Independent and Dependent Artifacts in Maven Central Ecosystem
A 635,003-artifact Maven study reports that zero-dependency artifacts have comparable popularity and fewer CVEs, but the CVE comparison ignores 12x group-size differences and the zero-propagation result is true by definition.