Abstract: Outlier software component remediation is disclosed. For example, a dependency evaluation module executes on a processor to determine an input stack including references to a first plurality of components incorporated in the program and a plurality of metadata tags associated with the first plurality of components. A plurality of selection filters is applied to the plurality of reference project manifests to select a reference project manifest as a reference stack. The first plurality of components identified in the input stack is compared with a second plurality of components identified in the reference stack. A component in the input stack is selected as an outlier component based on the reference stack lacking a reference to the component.

Abstract: Methods, systems, and computer program products are included for measuring similarity between different versions of software components. An example method includes a computing device identifying one or more software components. Properties are determined corresponding to a component of the identified one or more software components. The determined properties are represented as elements of a vector. A similarity is determined between the vector and a second vector corresponding to a different version of the component. A result is provided that indicates the determined similarity.

Abstract: Outlier software component remediation is disclosed. For example, a dependency evaluation module executes on a processor to determine an input stack including references to a first plurality of components incorporated in the program and a plurality of metadata tags associated with the first plurality of components. A plurality of selection filters is applied to the plurality of reference project manifests to select a reference project manifest as a reference stack. The first plurality of components identified in the input stack is compared with a second plurality of components identified in the reference stack. A component in the input stack is selected as an outlier component based on the reference stack lacking a reference to the component.

Abstract: Methods, systems, and computer program products are included for measuring similarity between different versions of software components. An example method includes a computing device identifying one or more software components. Properties are determined corresponding to a component of the identified one or more software components. The determined properties are represented as elements of a vector. A similarity is determined between the vector and a second vector corresponding to a different version of the component. A result is provided that indicates the determined similarity.