Endor Labs Inc

Georgios Gousios

Dimitrios Styliadis

Philip Hamer

Joseph Hejderup

Henrik Plate

Thomas Durieux

Anand Ashok Sawant

Camilla Odlund

In some examples, a server determines that project code calls a component in a third-party library that has been updated. The server determines a first type hierarchy associated with the component, a second type hierarchy associated with the updated component, and performs a type hierarchy comparison of the first and the second type hierarchy. The server determines a first call graph associated with the component, determines a second call graph associated with the updated component, and performs a call graph comparison of the first and second call graph. Based at least in part on the type hierarchy comparison and the call graph comparison, the server determines a set of breaking changes associated with the updated component, with each breaking change in the set identifying changes to the updated component, relative to the component, that are determined to cause an incompatibility when the project code calls the updated component.

Impact analysis of changes in third-party software components on downstream users

In some examples, a code file in a development system is selected and the selected code file is segmented, using a language-specific parser, to create multiple parsed blocks. A block of the multiple parsed blocks is selected and a cryptographic hash function used to create a block signature that uniquely identifies the selected block. The block signature is compared to multiple signatures of blocks in third-party libraries. The multiple signatures are stored in an index. When the block signature matches one of the multiple signatures of blocks in third-party libraries, the index is used to determine a source file from which the selected block was copied. Vulnerabilities included in the source file and fixes to address the vulnerabilities are identified to enable a software developer to apply the fixes to the identified vulnerabilities.

Software composition analysis (SCA) to identify AI-generated code that is copied code from third-party libraries

Growing community of inventors

Delft, Netherlands

Georgios Gousios