Zichao Wei

PatchPorter: LLM-Driven Security Patch Porting via Version Tracing and Context Selection for NPM

Third-Party Libraries are widely used in modern software development, yet their vulnerabilities pose serious security risks. This issue is particularly severe in the NPM ecosystem, where high-risk 1-day vulnerabilities can remain unpatched for extended periods. Although upgrading...