Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? | Paper Citation Record

Observation 8c24e113-407e-48e0-b5b3-db1dfcf8f706 · outbound

This paper cites Dependency Versioning in the Wild,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Dependency Versioning in the Wild,

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:11.437514Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a52a75d-1a45-4595-8a92-b11800d22ff4 · outbound

This paper cites Dependency Smells in JavaScript Projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Dependency Smells in JavaScript Projects,

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:11.527344Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6b908b70-11ab-4dca-ba78-ab2a7b908f6d · outbound

This paper cites A formal framework for measuring technical lag in component repositories — and its application to npm,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? A formal framework for measuring technical lag in component repositories — and its application to npm,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:11.697764Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fc651949-0c25-4224-94f8-aad901131c73 · outbound

This paper cites When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies,

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:11.842259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6cd0eeba-42e4-44f4-b592-eefd11ac84b8 · outbound

This paper cites When and How to Make Breaking Changes: Policies and Practices in 18 Open Source Software Ecosystems,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? When and How to Make Breaking Changes: Policies and Practices in 18 Open Source Software Ecosystems,

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:11.968570Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e40916bb-e191-4d67-a2ae-020491f9231d · outbound

This paper cites Semantic versioning and impact of breaking changes in the Maven repository,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Semantic versioning and impact of breaking changes in the Maven repository,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.187090Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 17274220-7121-41d5-ab17-0966fec43b2a · outbound

This paper cites Semantic Versioning versus Breaking Changes: A Study of the Maven Repository,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Semantic Versioning versus Breaking Changes: A Study of the Maven Repository,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.344365Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3c2752a-5338-4cfa-abd6-2cc8564517cb · outbound

This paper cites Taxonomy of Attacks on Open-Source Software Supply Chains.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Taxonomy of Attacks on Open-Source Software Supply Chains

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.481191Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b04c75f8-2bb6-4596-9b86-8866ff680bdf · outbound

This paper cites OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.613746Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 408a6895-981c-45a6-8583-dd0cc08620b2 · outbound

This paper cites OSSF Scorecard: Build better security habits, one test at a time,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? OSSF Scorecard: Build better security habits, one test at a time,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.798233Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a97e9f0-a892-46fd-a680-b3a92a6956d3 · outbound

This paper cites Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:12.942538Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 399dfb81-ab85-440a-9a4c-5152a019dc9a · outbound

This paper cites Replication Package,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Replication Package,

Reference 12

Resolution: verified exact; doi, observed 2026-08-04T11:18:25.176685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d83ebe03-440c-4439-8cd9-e45d685053c2 · outbound

This paper cites What is an Open Source Package,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? What is an Open Source Package,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:13.278064Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca3f6741-c04d-40e8-8900-1b0426610c26 · outbound

This paper cites Open Source Insights: Understand your dependencies,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Open Source Insights: Understand your dependencies,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:13.473710Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 239795aa-1718-41f0-9585-294816af30d7 · outbound

This paper cites Understanding vulnerabilities in software supply chains,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Understanding vulnerabilities in software supply chains,

Reference 15

Resolution: malformed identifier; no resolver link, observed 2026-08-04T11:18:13.634780Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 25bab9e6-706b-413e-924d-f24601d74565 · outbound

This paper cites Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem,

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:13.810217Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9cd0a4b6-d8d2-4e36-8702-a23c4c121008 · outbound

This paper cites Detecting and removing bloated dependencies in CommonJS packages.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Detecting and removing bloated dependencies in CommonJS packages

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:13.976984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28af5cec-451f-4b49-9dca-112cf8e74ef3 · outbound

This paper cites DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.102744Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb706859-3ffd-46d6-b104-f7a3cb9633f0 · outbound

This paper cites MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery,

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.235457Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a5842d0-3026-4044-8ac1-931711f16017 · outbound

This paper cites OSV .dev : A distributed vulnerability database for open source,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? OSV .dev : A distributed vulnerability database for open source,

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.411465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1d18f3bb-88c7-4b8c-8acb-4c892a944f2e · outbound

This paper cites GitHub Advisory Database,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? GitHub Advisory Database,

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.574484Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8122070a-e1a0-4709-91d0-f782e877b33b · outbound

This paper cites OSV: Current data sources,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? OSV: Current data sources,

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.695838Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 10b734e4-476d-4a53-857b-840f0c69f368 · outbound

This paper cites Self-Admitted Library Migrations in Java, JavaScript, and Python Packaging Ecosystems: A Comparative Study,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Self-Admitted Library Migrations in Java, JavaScript, and Python Packaging Ecosystems: A Comparative Study,

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.831180Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 758bdbe2-4684-4417-88ba-b327826491a0 · outbound

This paper cites Towards Better Dependency Management: A First Look at Dependency Smells in Python Projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Towards Better Dependency Management: A First Look at Dependency Smells in Python Projects,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.908970Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b676e68-56af-4944-9b62-4d0fc14286f3 · outbound

This paper cites MigrationAdvisor: Recommending Library Migrations from Large-Scale Open-Source Data,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? MigrationAdvisor: Recommending Library Migrations from Large-Scale Open-Source Data,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:14.991053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 319800a0-c51b-4b38-a2b9-293ecbdbe6c4 · outbound

This paper cites Investigating diversity and impact of the popularity metrics for ranking software packages,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Investigating diversity and impact of the popularity metrics for ranking software packages,

Reference 26

Resolution: verified exact; doi, observed 2026-08-04T11:18:25.023774Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c3b4721d-a5f3-4598-a0d5-a3d42df911cb · outbound

This paper cites Using the uniqueness of global identifiers to determine the provenance of Python software source code,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Using the uniqueness of global identifiers to determine the provenance of Python software source code,

Reference 27

Resolution: verified exact; doi, observed 2026-08-04T11:18:24.905457Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7e7a1fa5-39cc-4323-8ae3-724026cf4508 · outbound

This paper cites Understanding the Response to Open-Source Dependency Abandon- ment in the npm Ecosystem,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Understanding the Response to Open-Source Dependency Abandon- ment in the npm Ecosystem,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.270177Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a0d36c96-2155-4b1a-a88b-a21ea7a946b5 · outbound

This paper cites Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java,

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.361037Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4d499836-2095-46e7-8aa3-aa90f1d375d6 · outbound

This paper cites No Vulnerability Data, No Problem: Towards Predicting Mean Time To Remediate In Open Source Software Dependencies,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? No Vulnerability Data, No Problem: Towards Predicting Mean Time To Remediate In Open Source Software Dependencies,

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.429756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3c99a6f-4410-46a2-9c39-9402343bca34 · outbound

This paper cites Why modern open source projects fail,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Why modern open source projects fail,

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.537599Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eaae59ce-7417-4de1-a969-2fc846ea6d64 · outbound

This paper cites A Large Scale Analysis of Semantic Versioning in NPM,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? A Large Scale Analysis of Semantic Versioning in NPM,

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.648208Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db6e969b-a7cd-443c-a068-1a79664ec82b · outbound

This paper cites Survival analysis for the duration of software projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Survival analysis for the duration of software projects,

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.739112Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d24df1d-690c-407a-a7f9-ff9a012916ea · outbound

This paper cites Survival analysis on the duration of open source projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Survival analysis on the duration of open source projects,

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.844872Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 48093dbd-f13d-4a09-873b-aaf6167a26cd · outbound

This paper cites Application of biostatistics in dental public health,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Application of biostatistics in dental public health,

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:15.925171Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 65cea48c-36e5-4a02-a6c6-b34cdc18defe · outbound

This paper cites Statistics review 12: survival analysis,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Statistics review 12: survival analysis,

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.023868Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a55534f5-7214-498c-b220-5aa8657333ca · outbound

This paper cites Concepts in cancer survival analysis: Research questions, data, and models,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Concepts in cancer survival analysis: Research questions, data, and models,

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.121952Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 09e95dd2-e6b8-48b7-b0c7-47ebf567b826 · outbound

This paper cites lifelines: survival analysis in python,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? lifelines: survival analysis in python,

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.202968Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ff1abc6e-1872-4439-83cb-154b38ced45f · outbound

This paper cites Time-varying covariates and coefficients in cox regression models,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Time-varying covariates and coefficients in cox regression models,

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.296780Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 834d3205-498d-4ca2-9635-741da0bc4fed · outbound

This paper cites Semantic Versioning 2.0,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Semantic Versioning 2.0,

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.369554Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f08ca95f-0fad-480c-85b9-c1ff0033ae4e · outbound

This paper cites A Large-Scale Empirical Study on Semantic Versioning in Golang Ecosystem,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? A Large-Scale Empirical Study on Semantic Versioning in Golang Ecosystem,

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.448263Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5d408b12-0d12-4c97-bfe7-babb24ea0b73 · outbound

This paper cites Back to the Past – Analysing Backporting Practices in Package Dependency Networks,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Back to the Past – Analysing Backporting Practices in Package Dependency Networks,

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.526226Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e343ee48-d9d8-49aa-816a-f1ee2405cc3c · outbound

This paper cites an unresolved cited work.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Unresolved cited work

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.628556Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 92f593fa-1392-4bc6-95fc-eddc496895c3 · outbound

This paper cites What Do Package Dependencies Tell Us About Semantic Versioning?.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? What Do Package Dependencies Tell Us About Semantic Versioning?

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.700977Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8a63ae5b-8128-4e15-9034-6f69dae2cee7 · outbound

This paper cites Trusting a library: A study of the latency to adopt the latest Maven release,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Trusting a library: A study of the latency to adopt the latest Maven release,

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:16.904981Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 15ca609b-7ef0-4250-9230-b20da36e5da5 · outbound

This paper cites Do developers update their library dependencies?.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Do developers update their library dependencies?

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.056250Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a732543-731f-4337-a4e9-45252c1c3bca · outbound

This paper cites Measuring Dependency Freshness in Software Systems,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Measuring Dependency Freshness in Software Systems,

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.219861Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6eb2b541-29c3-4d94-8f76-a979a22382f6 · outbound

This paper cites Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android,

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.348324Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ecd10cc-08f1-42e7-8309-446f3108a6ea · outbound

This paper cites An Empirical Study of Usages, Updates and Risks of Third- Party Libraries in Java Projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? An Empirical Study of Usages, Updates and Risks of Third- Party Libraries in Java Projects,

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.517096Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 69c08e93-e29c-40cb-8be5-94ef6dbfd300 · outbound

This paper cites Characterizing usages, updates and risks of third-party libraries in Java projects,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Characterizing usages, updates and risks of third-party libraries in Java projects,

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.705665Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6da4cb95-c757-48d5-a02f-6a20a0bc3608 · outbound

This paper cites Vulnerable open source dependencies: counting those that matter,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Vulnerable open source dependencies: counting those that matter,

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.991209Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation da2325d1-6a0b-4171-9896-8ff01da9b923 · outbound

This paper cites Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies,

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:18.065087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bfa9891c-aa0b-4d5f-aef0-441f1e57ff6d · outbound

This paper cites A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software,

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:18.148296Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 55858078-f6ac-4eca-b64e-e3672e68cc9f · outbound

This paper cites On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:18.240904Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d30bb477-3391-4173-aee9-818c3e46f24d · outbound

This paper cites A Closer Look at the Security Risks in the Rust Ecosystem,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? A Closer Look at the Security Risks in the Rust Ecosystem,

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:18.313927Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 311823cf-118a-48b0-8de2-9fee9ca0030e · outbound

This paper cites Vulnerability Exploitability eXchange (VEX) : Use Cases,.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Vulnerability Exploitability eXchange (VEX) : Use Cases,

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:18.463036Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bbc29e08-bb30-412b-9b9a-08f82491bf1b · outbound

This paper cites Available: https://doi.org/10.1007/s10664-022-10131-8.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Available: https://doi.org/10.1007/s10664-022-10131-8

Reference 2022

Resolution: unresolved; no resolver link, observed 2026-08-04T11:18:17.864416Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers