Similar Items: Third-party library selection in IT projects under imperfect data using Dempster–Shafer theory