System For Vector Space Search for Abnormal Dependencies

A computer-implemented method, the method comprising:

• identifying an abnormal dependency within a software application;
• determining the abnormal dependency is not declared within a package manager manifest;
• extracting, by a semantic hash code algorithm executed by one or more processors, one or more measured characteristics for the abnormal dependency;
• determining, based on the one or more measured characteristics, a semantic hash code value for the abnormal dependency, the semantic hash code value comprising a coordinate position within a multi-dimensional vector space;
• storing, in a data repository storing a plurality of associations each associated with a different instance of source code, an association between the abnormal dependency and the semantic hash code value;
• retrieving, from the data repository, other stored associations having a corresponding semantic hash code value that is located proximate to the semantic hash code value of the abnormal dependency in the multi-dimensional vector space;
• and
• obtaining, based on at least one of the retrieved stored associations, supplemental information associated with a found instance of source code identified by the at least one of the retrieved stored associations, the supplemental information including at least one of:
• an origin of the found instance of source code, a version of the found instance of source code, or licensing information associated with the found instance of source code;
• and
• incorporating, during a software application build/binding procedure (SABP) for constructing the software application, a software component corresponding to the abnormal dependency, based at least in part on the obtained supplemental information.

A non-transitory computer readable storage medium comprising instructions that, when executed by at least one processor, cause a computing device to perform operations comprising:

• identify an abnormal dependency within a software application;
• determine the abnormal dependency is not declared within a package manager manifest;
• extract, by a semantic hash code algorithm, one or more measured characteristics for the abnormal dependency;
• determine, based on the one or more measured characteristics, a semantic hash code value for the abnormal dependency, the semantic hash code value comprising a coordinate position within a multi-dimensional vector space;
• store, in a data repository storing a plurality of associations each associated with a different instance of source code, an association between the abnormal dependency and the semantic hash code value;
• retrieve, from the data repository, other stored associations having a corresponding semantic hash code value that is located proximate to the semantic hash code value of the abnormal dependency in the multi-dimensional vector space;
• and
• obtain, based on at least one of the retrieved stored associations, supplemental information associated with a found instance of source code identified by the at least one of the retrieved stored associations, the supplemental information including at least one of:
• an origin of the found instance of source code, a version of the found instance of source code, or licensing information associated with the found instance of source code;
• and
• incorporate, during a software application build/binding procedure (SABP) for constructing the software application, the abnormal dependency, based at least in part on the obtained supplemental information.