Replication Data for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"

Citation Metadata

Title title

Replication Data for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"

Author author

1. Author Name

   Swierzy, Ben

   Author Affiliation

   University of Bonn

   Author Identifier Scheme

   ORCID

   Author Identifier

   Type Name

   authorIdentifier

   Multiple

   False

   Type Class

   primitive

   Value

   https://orcid.org/0009-0003-0485-4791

   Expandedvalue

   Person Name

   Swierzy, Ben

   @id

   https://orcid.org/0009-0003-0485-4791

   Scheme

   ORCID

   @type

   https://schema.org/Person

Dataset Contact datasetContact

1. Dataset Contact Name

   Swierzy, Ben

   Dataset Contact Affiliation

   University of Bonn

   Dataset Contact Email

   swierzy@cs.uni-bonn.de

Ds Description dsDescription

1. Ds Description Value

   This dataset contains replication data for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". This includes metadata of the 6 weeks of Tranco top 100k scans. This does not include the dataset of JavaScript files (for legal reasons). For access to the scraped files, please message the corresponding author.

Subject subject

1. Computer and Information Science

Subject Refinement subjectRefinement

1. Subject Refinement Value

   Computer Science: Software Engineering and Programming Languages [409-02]

2. Subject Refinement Value

   Computer Science: Security and Dependability [409-03]

Free Keyword freeKeyword

1. Free Keyword Value

   internet measurement

2. Free Keyword Value

   javascript

3. Free Keyword Value

   bundles

Publication publication

1. Publication Relation Type

   IsSupplementTo

   Publication Citation

   Ben Swierzy, Marc Ohm, and Michael Meier. 2026. Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web. In 2026 IEEE/ACM 48th International Conference on Software Engineering (ICSE ’26), April 12–18, 2026, Rio de Janeiro, Brazil. ACM, New York, NY, USA, 13 pages. https://doi.org/10.1145/3744916.3787780

   Publication IDType

   doi

   Publication IDNumber

   10.1145/3744916.3787780

   Publication URL

   https://dl.acm.org/doi/abs/10.1145/3744916.3787780

2. Publication Relation Type

   IsSupplementTo

   Publication Citation

   Swierzy, Ben, Marc Ohm, and Michael Meier. "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web." arXiv preprint arXiv:2512.15447 (2025).

   Publication IDType

   doi

   Publication IDNumber

   10.48550/arXiv.2512.15447

   Publication URL

   https://arxiv.org/abs/2512.15447

Language language

1. English

Depositor depositor

Swierzy, Ben

Date Of Deposit dateOfDeposit

2026-01-14

Date Of Collection dateOfCollection

1. Date Of Collection Start

   2024-10-31

   Date Of Collection End

   2024-12-12

Kind Of Data kindOfData

1. machine-readable text

Related Material relatedMaterial

1. GitHub Repository: https://github.com/BlobbyBob/AletheiaJSVersionDetection
2. Crawler (used for creation): https://doi.org/10.60507/FK2/F4VQRH
3. Dolospy (used for analysis): https://doi.org/10.60507/FK2/LYIDHI

Data Sources dataSources

1. Landing pages of Tranco top 100k domains. List available at https://tranco-list.eu/list/G6LKK