The software ecosystem is a trust-rich part of the world. Collaboratively, software engineers trust major hubs in the ecosystem, such as package managers, repository services, and programming language ecosystems. This trust, however, is often broken by vulnerabilities, ransomware, and abuse from malignant actors. But what is trust? In this paper we explore, through twelve in-depth interviews with software engineers, how they perceive trust in their daily work. From the interviews we conclude three things. First, software engineers make a distinction between an adoption factor and a trust factor when selecting a package. Secondly, while in literature mostly technical factors are considered as the main trust factors, the software engineers in this study conclude that organizational factors are more important. Finally, we find that different kinds of software engineers require different views on trust, and that it is impossible to create one unified perception of trust. Keywords: software ecosystem trust, empirical software engineering, TrustSECO, external software adoption, cross-sectional exploratory interview analysis, trust perception.
翻译:软件生态系统是世界信任丰富的部分。 软件工程师共同信任生态系统中的主要枢纽, 如软件管理员、 存储器服务和编程语言生态系统。 但是, 这种信任经常被脆弱性、 赎金软件和恶性行为者的虐待所打破。 但是, 信任是什么? 在这份文件中, 我们通过与软件工程师的12次深入访谈, 探索他们对日常工作的信任感。 我们从访谈中得出三点结论。 首先, 软件工程师在选择软件包时区分一个采纳因素和一个信任因素。 第二, 在文献中, 多数技术因素被视为主要信任因素, 而本研究中的软件工程师的结论是, 组织因素更重要。 最后, 我们发现, 不同种类的软件工程师需要不同的信任观点, 并且不可能形成一种统一的信任感。 关键词是: 软件生态系统信任、 经验性软件工程工程、 TrustSECO、 外部软件应用、 跨部门探索性访谈分析、 信任感知觉 。