Benoit Baudry
223 papers 1.5K citations h-index 21 2000–2026
Challenges of Producing Software Bill Of Materials for Java
Software bills of materials (SBOM) promise to become the backbone of software supply chain hardening. We deep-dive into 6 tools and the accuracy of the SBOMs they produce for complex open-source...
Generative AI to Generate Test Data Generators
Generating fake data is an essential dimension of modern software testing, as demonstrated by the number and significance of data faking libraries. Yet, developers of faking libraries cannot keep...
Breaking-Good: Explaining Breaking Dependency Updates with Build Analysis
Dependency updates often cause compilation errors when new dependency versions introduce changes that are incompatible with existing client code. Fixing breaking dependency updates is notoriously...
BUMP: A Benchmark of Reproducible Breaking Dependency Updates
Third-party dependency updates can cause a build to fail if the new dependency version introduces a change that is incompatible with the usage: this is called a breaking dependency update....
Galapagos: Automated N-Version Programming with LLMs
N-Version Programming is a well-known methodology for developing fault-tolerant systems. It achieves fault detection and correction at runtime by adding diverse redundancy into programs,...
WASM-MUTATE: Fast and Effective Binary Diversification for WebAssembly
WebAssembly is the fourth officially endorsed Web language. It is recognized because of its efficiency and design, focused on security. Yet, its swiftly expanding ecosystem lacks robust software...
Software Bills of Materials in Maven Central
Software Bills of Materials (SBOMs) are essential to ensure the transparency and integrity of the software supply chain. There is a growing body of work that investigates the accuracy of SBOM...
WebAssembly Diversification for Malware Evasion
WebAssembly has become a crucial part of the modern web, offering a faster alternative to JavaScript in browsers. While boosting rich applications in browser, this technology is also very...
The Design Space of Lockfiles Across Package Managers
Software developers reuse third-party packages that are hosted in package registries. At build time, a package manager resolves and fetches the direct and indirect dependencies of a project. Most...
Causes and Canonicalization of Unreproducible Builds in Java
The increasing complexity of software supply chains and the rise of supply chain attacks have elevated concerns around software integrity. Users and stakeholders face significant challenges in...
Dirty-Waters: Detecting Software Supply Chain Smells
Using open-source dependencies is essential in modern software development. However, this practice implies significant trust in third-party code, while there is little support for developers to...
PROZE: Generating Parameterized Unit Tests Informed by Runtime Data
Typically, a conventional unit test (CUT) verifies the expected behavior of the unit under test through one specific input / output pair. In contrast, a parameterized unit test (PUT) receives a...
With Great Humor Comes Great Developer Engagement
The worldwide collaborative effort for the creation of software is technically and socially demanding. The more engaged developers are, the more value they impart to the software they create....
Automatic Specialization of Third-Party Java Dependencies
Large-scale code reuse significantly reduces both development costs and time. However, the massive share of third-party code in software projects poses new challenges, especially in terms of...
A Longitudinal Analysis of Bloated Java Dependencies
We study the evolution and impact of bloated dependencies in a single software ecosystem: Java/Maven. Bloated dependencies are third-party libraries that are packaged in the application binary but...
Byam: Fixing Breaking Dependency Updates with Large Language Models
Application Programming Interfaces (APIs) facilitate the integration of third-party dependencies within the code of client applications. However, changes to an API, such as deprecation,...
A Comprehensive Study of Bloated Dependencies in the Maven Ecosystem
Build automation tools and package managers have a profound influence on software development. They facilitate the reuse of third-party libraries, support a clear separation between the...
Mimicking Production Behavior with Generated Mocks
Mocking allows testing program units in isolation. A developer who writes tests with mocks faces two challenges: design realistic interactions between a unit and its environment; and understand...