开源软件库生态治理技术研究综述:二十年进展  

Survey on Governance Technology of Open-source Software Library Ecosystem:Twenty Years of Progress

作　　者：王莹[1,3,5] 伍盈欣 高天[1] 陈子莺 许畅 于海 张成志[5] WANG Ying;WU Ying-Xin;GAO Tian;CHEN Zi-Ying;XU Chang;YU Hai;CHEUNG Shing-Chi(Software College,Northeastern University,Shenyang 110169,China;Department of Computer Science and Technology,Nanjing University,Nanjing 210023,China;State Key Laboratory for Novel Software Technology(Nanjing University),Nanjing 210023,China;Key Laboratory of Data Analytics and Optimization for Smart Industry,Ministry of Education(Frontier Science Center for Industrial Intelligence and System Optimization,Northeastern University),Shenyang 110169,China;Department of Computer Science and Engineering,Hong Kong University of Science and Technology,Hong Kong 999077,China)

机构地区：[1]东北大学软件学院,辽宁沈阳110169 [2]南京大学计算机科学与技术系,江苏南京210023 [3]计算机软件新技术国家重点实验室(南京大学),江苏南京210023 [4]智能工业数据解析与优化教育部重点实验室(东北大学工业智能与系统优化国家级前沿科学中心),辽宁沈阳110169 [5]香港科技大学计算机科学及工程学系,中国香港999077

出　　处：《软件学报》2024年第2期629-674,共46页Journal of Software

基　　金：国家自然科学基金(62141210,61932021,61902056,61802164,61977014);中央高校基本科研业务费(N2217005);南京大学软件新技术国家重点实验室开放基金(KFKT2021B01);111项目(B16009)。

摘　　要：在“人-机-物”三元融合、泛在计算的时代蓝海下,“开放多变”“需求多样”和“场景复杂”的软件部署和运行环境对开源软件库生态的治理技术提出了更多需求和更高期望.为进一步推动构建可信软件供应链生态,围绕泛在计算模式、打造自主可控的技术体系,聚焦于开源软件库管理生态,收集近20多年来(2001–2023)发表于软件工程领域较高影响力的学术期刊和会议的348篇论文,对开源软件库生态治理技术的研究工作进行梳理.讨论开源软件库生态的建模与分析、演化与维护、质量保证和管理等方面的工作,总结研究现状、问题、挑战与趋势.Under the new era of“human-machine-thing”ternary integration and ubiquitous computing,the software deployment and operation environment of“open and changeable”,“diverse needs”,and“complex scenarios”have put forward more requirements and higher expectations for the governance of open-source software library ecosystems.To further promote the construction of trusted software supply chain ecosystems and create an independent and controllable technical system based on the ubiquitous computing model,this study focuses on open-source software library ecosystems.It collects 348 authoritative papers in this field in the past two decades(2001–2023)and sorts out the research work of open-source software library management ecological governance technology.The study discusses the modeling and analysis,evolution and maintenance,quality assurance,and management of open-source software supply chain ecosystems,and summarizes the research status,problems,challenges and trends.

关 键 词：开源软件供应链 开源治理 软件库生态系统 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]