UpCy: Safely Updating Outdated Dependencies

This archive contains the implementation and source code of the tool UpCy as published in the ICSE2023 paper "UpCy: Safely Updating Outdated Dependencies".
Further, the repository contains a Neo4j database of Maven Central, a database of API incompatibilities, generated by SigTest, and evaluation results.

A detailed description of the artifacts and their usage is contained in the README.md.

What is UpCy
UpCy is a tool for Maven projects that automatically finds a list of update steps that updates a dependency to a target version while minimizing the number of API incompatibilities (source code- and ABI).
Typically a dependency in a Maven project is used by multiple libraries in the project's dependency tree. Thus, developers usually need to update not only the single dependencies but find out what other dependencies use that dependency as well and find a compatible version.
To ease fixing of remaining incompatibilities, UpCy uses static analysis to identify API incompatible methods that are *actually* used in the project.
UpCy does this automatically and reports (remaining) incompatible API methods.

 

Content

• incompabilities_mongodb.tar.gz: MongoDB containing the API incompatibilities between analyzed libraries
• maven-central_neo4j.tar.gz: Neo4j database of the Maven Central Repository mentioned in Section IV
• experimental-results_dataset.zip: The experimental results and analysis scripts to compute the metrics mentioned in Section V
• docker-compose*.yml: docker-compose files for running an instance of Neo4j and MongoDB
• src*.zip: source code release of UpCy
• *.jar: executable version of UpCy
• setup_scripts.zip: a set of ready-to-use scripts for running the code

Usage:

• Download the archive from zenodo
• Decompress the archive
• Read README.md