第三方库依赖冲突问题研究综述
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

TP311

基金项目:

国家重点研发计划(2017YFA0700603),国家自然科学基金(61972386)


Survey of State-of-the-art Third-party libraries Conflict Dependency Problem
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    软件开发过程中,开发人员通过大量使用第三方库来实现代码复用。不同第三方库之间存在依赖关系,第三方库间的不兼容会导致第三方库的安装、加载、调用时出现错误,进而导致系统异常,这类问题称之为第三方库依赖冲突问题。依赖冲突的根本原因是加载的第三方库无法覆盖软件引用的必需特性(例如:方法)。依赖冲突问题会在第三方库的下载安装,项目编译和运行时中出现,且定位困难。依赖冲突问题的修复要求开发人员对使用的第三方库版本间差别具有准确的理解,并且第三方库之间复杂的依赖关系增加了修复难度。为了能够在软件运行前,发现软件中存在的依赖冲突,并且能够响应和处理运行过程中由依赖冲突引发的系统异常,国内外学者展开了各种针对依赖冲突问题的研究。本文从依赖冲突问题的四个方面,对当前已有研究工作进行了梳理,包括:第三方库的使用实证分析、依赖冲突原因分析、依赖冲突检测方法以及依赖冲突常用修复方式。论文最后对该领域未来值得关注的研究问题进行了展望。

    Abstract:

    During software development, developers make extensive use of third-party libraries to relieve themselves of heavy burden instead of reinventing common functions. There are dependencies between different third-party libraries. Incompatibilities between versions will lead to errors during installing, loading or invoking third-party libraries, resulting in system exceptions. Such problem is called Dependency Conflict (DC also referred as Conflict Dependency or CD) issue. The root cause of this issue is the third-party libraries fail to cover required features (e.g., methods). DC issues often occur at the project’s build time or runtime, and are difficult to locate. Repairing DC issues requires developers to know about the differencies among versions of third-party libraries they use, and the complex relationship between the third-party libraries increases the difficulty of repairment. In order to find DC issues before software running, and to respond to and deal with system anomalies caused by DC issues in the process of running, researchers have made various studies on these issues. This paper conducts a systematic review of this research topic from four aspects, including the usage analysis of third-party libraries, the root cause of DC issues, the detection methods of DC issues, and common fixing strategies. Finally, the potential research opportunities in the future are discussed, and references are provided for researchers in this field.

    参考文献
    相似文献
    引证文献
引用本文

李硕,刘杰,王帅,田浩翔,叶丹.第三方库依赖冲突问题研究综述.软件学报,,():0

复制
分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2021-10-09
  • 最后修改日期:2022-01-06
  • 录用日期:
  • 在线发布日期: 2022-05-24
  • 出版日期:
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号