VDGraph integrates SBOM and SCA data into a queryable graph and shows, on 21 Java projects, that vulnerabilities concentrate in deeply nested transitive dependencies reachable through many paths.
License compliance issues in free and open source software,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.SE 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
background 1representative citing papers
citing papers explorer
-
VDGraph: A Graph-Theoretic Approach to Unlock Insights from SBOM and SCA Data
VDGraph integrates SBOM and SCA data into a queryable graph and shows, on 21 Java projects, that vulnerabilities concentrate in deeply nested transitive dependencies reachable through many paths.