Jacob Stringer, Amjed Tahir, Kelly Blincoe, Jens Dietrich: Technical Lag of Dependencies in Major Package Managers. APSEC 2020: 228-237