arXiv preprint ·

The Policies of Programming Language Ecosystems: A "Qualitative" Analysis

Jukka Ruohonen, Rahime Yilmaz and Krzysztof Sierszecki

Published
Source
arXiv preprint, posted before peer review
Original
Read it at arXiv
Topics
Software EngineeringCryptography & SecurityComputers & Society

Abstract

Programming language ecosystems (PLEs), such as CRAN for R, have greatly accelerated software reuse. At the same time, they have increased software supply-chain risks and incidents. However, the problems are not limited to cyber security; everything from illegal content and content moderation to harassment and sexual content are mentioned in many policies of popular PLEs. The paper examines these policies. According to a moderate agreement between the three authors on 38 distinct policy categories and eight PLE policies, the policies generally exhibit divergence rather than convergence. However, some policy categories, such as those about malware, intellectual property, and content removal, are universally recognized. The divergence is thus seen in more fine-grained policy categories, such as those related to package size limits, manipulation of metrics, typo-squatting, and binary uploads. These and other related qualitative results patch a notable gap in existing PLE research.

The authors’ abstract, as arXiv lists it. arXiv’s listings, abstracts included, are free for anyone to reuse.

Read it on ReadSearch

Each opens after you create an account, and brings you back to this paper.

Already a reader? Sign in

All new papers in Software Engineering

Get the few papers worth your time in Software Engineering every morning.

ReadSearch reads the new papers in your field each day and brings you the few worth reading, each with its key finding in a sentence.

Papers belong to their authors and publishers; every page here links to the original. All research topics