arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~

这些暴力的愉悦会有暴力的结局吗?衡量代理代码合并后的命运

Do These Violent Delights Have Violent Ends? Measuring the Post-Merge Fate of Agentic Code

Chunqiu Steven Xia, Courtney Miller

arXiv 2607.09902首次发表:更新:

发表机构

University of Illinois Urbana-Champaign; George Washington University(伊利诺伊大学厄巴纳-香槟分校; 乔治华盛顿大学)

机构由 AI 辅助整理,请以论文原文为准。

AI 中文总结

研究代理代码合并后的命运,通过对182个仓库实证分析,发现其虽与人工维护率相似,但需更高纠正性维护率,还引入更多问题,且维护负担与仓库特征有关,强调评估设计代理工具要兼顾安全性与可维护性。

AI 中文摘要

代理编码工具越来越多地用于对实际项目进行自主的仓库级更改。先前的工作主要在合并前阶段通过拉取请求接受和审查工作量等结果来评估这些贡献。对于合并后代理代码的情况知之甚少。然而,仅合并成功并不能揭示贡献是否会保持稳定,还是需要在下游进行错误修复和其他纠正性维护。我们对182个仓库中的代理和人工贡献进行了纵向实证分析,跟踪它们合并后的长期命运,描述后续修改的意图,并分析它们引入的缺陷和漏洞。虽然总体维护率相似,但代理贡献需要更高的纠正性维护率,并且会引入更多安全弱点和依赖漏洞。我们还发现有统计学意义的证据表明,代理维护负担与仓库特征相关。特别是项目无审查率每增加10个百分点,代理维护负担平均大约增加6%。随着编码代理在软件开发中变得普遍,我们的发现凸显了不仅要评估和设计代理工具以产生可合并的更改,还要产生安全且可维护的贡献的必要性。

英文摘要

Agentic coding tools are increasingly used to make autonomous repository-level changes to real-world projects. Prior work has largely evaluated these contributions at the pre-merge stage, through outcomes such as pull request acceptance and review effort. Far less is known about what happens to agentic code post-merge. Yet merge success alone does not reveal whether a contribution will remain stable or require bug fixes and other corrective maintenance downstream. We conduct a longitudinal empirical analysis of agentic and human contributions across 182 repositories, tracking their post-merge fate over time, characterizing the intent of subsequent modifications, and analyzing the defects and vulnerabilities they introduce. While the overall maintenance rates are similar, agentic contributions require significantly higher rates of corrective maintenance and introduce more security weaknesses and dependency vulnerabilities. We also find statistically significant evidence that agentic maintenance burden is associated with repository characteristics. In particular, each 10 percentage-point increase in a project's no-review rate is associated with roughly a 6% increase in agentic maintenance burden on average. As coding agents become pervasive in software development, our findings highlight the need to evaluate and design agentic tools not only to produce mergeable changes, but to produce contributions that remain secure and maintainable.

论文原文

arXiv 摘要页 · PDF 原文 · HTML 原文

↑