Classport: Designing Runtime Dependency Introspection for Java

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Cofano, Serena, Williams, Daniel, Sharma, Aman, Monperrus, Martin
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866908963564421120
author Cofano, Serena
Williams, Daniel
Sharma, Aman
Monperrus, Martin
author_facet Cofano, Serena
Williams, Daniel
Sharma, Aman
Monperrus, Martin
contents Runtime introspection of dependencies, i.e., the ability to observe which dependencies are currently used during program execution, is fundamental for Software Supply Chain security. Yet, Java has no support for it. We solve this problem with Classport, a blueprint and system that embeds dependency information into Java class files, enabling the retrieval of dependency information at runtime. We evaluate Classport on six real-world projects, demonstrating the feasibility in identifying dependencies at runtime.
format Preprint
id arxiv_https___arxiv_org_abs_2510_20340
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Classport: Designing Runtime Dependency Introspection for Java
Cofano, Serena
Williams, Daniel
Sharma, Aman
Monperrus, Martin
Software Engineering
Cryptography and Security
Runtime introspection of dependencies, i.e., the ability to observe which dependencies are currently used during program execution, is fundamental for Software Supply Chain security. Yet, Java has no support for it. We solve this problem with Classport, a blueprint and system that embeds dependency information into Java class files, enabling the retrieval of dependency information at runtime. We evaluate Classport on six real-world projects, demonstrating the feasibility in identifying dependencies at runtime.
title Classport: Designing Runtime Dependency Introspection for Java
topic Software Engineering
Cryptography and Security
url https://arxiv.org/abs/2510.20340