Search papers, labs, and topics across Lattice.
This paper critiques the traditional reliance on external software dependencies, highlighting the rising costs associated with software supply chain attacks and the decreasing costs of local implementation through generative AI. The authors propose a novel approach called use-case-oriented regeneration, which focuses on synthesizing only the necessary functionality from dependencies, thereby enhancing security and reducing maintenance overhead. Their empirical evaluation across 180 repository-dependency pairs demonstrates that this method can maintain 99.8% of the original behavior while significantly minimizing the exported API surface by 93%.
Shifting from external dependencies to local code synthesis can preserve functionality while slashing the attack surface by 93%.
Modern software development relies on an increasingly doubtful premise: that the up-front implementation savings from adopting a dependency outweighs the maintenance costs. Two changes are reshaping the build-vs.-reuse calculus: software supply chain attacks have raised the cost of external reliance, while generative AI has lowered the cost of local implementation. We envision use-case-oriented regeneration as a new software sourcing paradigm that shifts the supply chain from external trust to local verification. We evaluate an agentic workflow that synthesizes only the specific slice of dependency functionality that a repository exercises. Our measurements across 180 repository-dependency pairs suggest that this approach is feasible: the replacements preserve 99.8% of repository-observed behavior across baseline validation checks and reduce the exported API surface by 93%. Software sourcing may evolve toward verifiable repository-specific code synthesis, especially when the required functionality is narrow, stable, and well tested.
