Package olivia

OLIVIA (Open-source Library Indexes Vulnerability Identification and Analysis).

The use of centralized library repositories to reduce development times and costs is universal, in virtually all languages and types of software projects. Due to the transitivity of dependencies, the appearance of a single defect in the repository can have extensive and difficult-to-predict effects on the ecosystem. These defects cause functional errors or performance or security problems. The risk is difficult to grasp for developers, who only explicitly import a small part of the dependencies.

OLVIA uses an approach based on the vulnerability of the dependency network of software packages, which measures how sensitive the repository is to the random introduction of defects. The goals of the model are to contribute to the understanding of propagation mechanisms of software defects and to study feasible protection strategies.

Copyright (c) 2021 Daniel Setó Rey

OLIVIA is distributed under the MIT License. See LICENSE file for details.

Expand source code
"""
OLIVIA (Open-source Library Indexes Vulnerability Identification and Analysis).

The use of centralized library repositories to reduce development times and costs is universal, in virtually all
languages and types of software projects. Due to the transitivity of dependencies, the appearance of a single defect
in the repository can have extensive and difficult-to-predict effects on the ecosystem. These defects cause functional
errors or performance or security problems. The risk is difficult to grasp for developers, who only explicitly import
a small part of the dependencies.

OLVIA uses an approach based on the vulnerability of the dependency network of software packages, which measures how
sensitive the repository is to the random introduction of defects. The goals of the model are to contribute to the
understanding of propagation mechanisms of software defects and to study feasible protection strategies.

Copyright (c) 2021 Daniel Setó Rey

OLIVIA is distributed under the MIT License. See LICENSE file for details.
Includes tools for the analysis of package dependency networks vulnerability to failures and attacks.

model.py: Olivia network model.
OliviaNetwork includes methods for building and manipulating models.

packagemetrics.py: Package level network-wide metrics.
MetricStats include tools to store and manipulate Olivia metrics.

networkmetrics.py: Network vulnerability measures.

coupling.py: Coupling characterizes the local structure of the transitive dependency relation between packages.

immunization.py: Immunization analyzes in which packages it is better to invest to protect the network as a whole.
"""

Sub-modules

olivia.coupling

Olivia coupling functions …

olivia.immunization

Olivia immunization functions …

olivia.lib

OLIVIA (Open-source Library Indexes Vulnerability Identification and Analysis) …

olivia.model

Olivia Model for studying the vulnerability of package dependency networks …

olivia.networkmetrics

Olivia network vulnerability metrics.

olivia.packagemetrics

Olivia package metrics for network vulnerability analysis.

olivia.tests

Olivia Tests.