R. G. Kula

It is found that security concerns motivated 83 of 92 adoption events with known motivations and early adopters favor simple default delays over fine-grained controls for dependencies with clear update priorities, suggesting that tools could provide robust defaults reflecting ecosystem support and reserve fine-grained controls for dependencies with clear update priorities.

A large-scale empirical study of over six million packages across six major ecosystems to understand how prevalent cross-ecosystem packages are among all packages, whether there are distinct source code architectural patterns that cross-ecosystem packages use, and whether there are correlations between architectural patterns and project health metrics from GitHub.

Newcomers beware: the odds of your "good first issue" pull request getting merged have plummeted nearly 20% in the last year.