With the rise of the library ecosystem (such as NPM for JavaScript and PyPI for Python), a developer has access to a multitude of library packages that they can adopt as dependencies into their application.Prior work has found that these ecosystems form a complex web of dependencies, where sustainability issues of a single library can have widespread network effects. Due to the Open Source Software (OSS) nature of third party libraries, there are rising concerns with the sustainability of these libraries. In a survey of 49 developers from the NPM ecosystem, we find that developers are more likely to maintain their own packages rather than contribute to the ecosystem. Our results opens up new avenues into tool support and research into how to sustain these ecosystems, especially for developers that depend on these libraries. We have made available the raw results of the survey at \url{https://tinyurl.com/2p8sdmr3}.
翻译:随着库生态系统(如JavaScript的NPM和Python的PyPI)的兴起,开发者能够获取大量库包,并将其作为依赖项引入应用程序。先前的研究发现,这些生态系统构成了复杂的依赖网络,单个库的可持续性问题可能产生广泛的网络效应。由于第三方库的开源软件(OSS)特性,这些库的可持续性日益受到关注。通过对NPM生态系统中49名开发者的调查,我们发现开发者更倾向于维护自己的软件包,而非为生态系统做出贡献。我们的研究结果为工具支持及如何维持这些生态系统的研究开辟了新途径,特别是对于那些依赖这些库的开发者而言。我们已在\url{https://tinyurl.com/2p8sdmr3}公开了调查的原始数据。