Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"doi:10.60507/FK2/F4VQRHbonndata2026-01-221Swierzy, Ben, 2026, "Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"", https://doi.org/10.60507/FK2/F4VQRH, bonndata, V1Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"doi:10.60507/FK2/F4VQRHSwierzy, BenbonndataSwierzy, BenSwierzy, Ben2026-01-09Computer and Information ScienceThis dataset contains software artifacts for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". It includes all software artifacts (crawler, Aletheia implementation, evaluation scripts) used for analysis. For the re-implementation of Dolos (dolospy), please check the related material.program source code<a href="https://mit-license.org/">MIT</a>GitHub Repository: https://github.com/BlobbyBob/AletheiaJSVersionDetectionDolospy: https://doi.org/10.60507/FK2/F4VQRHInternet Measurement Dataset: https://doi.org/10.60507/FK2/AHYGMNBen Swierzy, Marc Ohm, and Michael Meier. 2026. Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web. In 2026 IEEE/ACM 48th International Conference on Software Engineering (ICSE ’26), April 12–18, 2026, Rio de Janeiro, Brazil. ACM, New York, NY, USA, 13 pages. https://doi.org/10.1145/3744916.378778010.1145/3744916.3787780Ben Swierzy, Marc Ohm, and Michael Meier. 2026. Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web. In 2026 IEEE/ACM 48th International Conference on Software Engineering (ICSE ’26), April 12–18, 2026, Rio de Janeiro, Brazil. ACM, New York, NY, USA, 13 pages. https://doi.org/10.1145/3744916.3787780Swierzy, Ben, Marc Ohm, and Michael Meier. "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web." arXiv preprint arXiv:2512.15447 (2025).10.48550/arXiv.2512.15447Swierzy, Ben, Marc Ohm, and Michael Meier. "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web." arXiv preprint arXiv:2512.15447 (2025).readme.txttext/plainUSAGE.mdtext/markdowndocker-compose.ymlapplication/yamlrabbitmq.conftext/plainbundlefetcher-stealth.pytext/x-pythonDockerfileapplication/x-docker-filepuppeteer.mjsapplication/x-javascriptrequirements.txttext/plainDockerfileapplication/x-docker-filedomainlist.pytext/x-pythonrequirements.txttext/plainDockerfileapplication/x-docker-fileentrypoint.shapplication/x-shellscripthev.ymlapplication/yamlDockerfileapplication/x-docker-fileobject-storage.pytext/x-pythonrequirements.txttext/plainpyproject.tomlapplication/toml__init__.pytext/x-pythonDockerfileapplication/x-docker-filerequirements.txttext/plainseparating-collector.pytext/x-pythonDockerfileapplication/x-docker-filerequirements.txttext/plainthrottle.pytext/x-pythonbundler-prevalence.ipynbapplication/x-ipynb+jsoncdn-urls.ipynbapplication/x-ipynb+jsoncommon.pytext/x-pythonlab-aletheia.ipynbapplication/x-ipynb+jsonlab-bundler-study.ipynbapplication/x-ipynb+jsonreal-aletheia.ipynbapplication/x-ipynb+jsonreal-bundler-study.ipynbapplication/x-ipynb+jsonupdate-patterns-aletheia.ipynbapplication/x-ipynb+jsonupdate-patterns-cdn.ipynbapplication/x-ipynb+jsonupdate-patterns-pnpm.ipynbapplication/x-ipynb+jsonaletheia_speed_eval.pytext/x-pythonaletheia_speed_eval_real_vd.pytext/x-pythonaletheia_speed_eval_recover.pytext/x-pythonanalyze_bundle_dataset.pytext/x-pythonbiome.jsonapplication/jsonbun-serve.mjsapplication/x-javascriptfile-selection.pdfapplication/pdffile-selector.mjsapplication/x-javascriptgenerate_bundles.pytext/x-pythonlocal_version_fetcher.pytext/x-pythonnpm_mirror.pytext/x-pythonpackage.jsonapplication/jsonpack_bundles.pytext/x-pythonvulnerability-database.pytext/x-pythonaletheia-preprocessor.mjsapplication/x-javascriptaletheia-preprocessor.worker.mjsapplication/x-javascriptaletheia-serializer.mjsapplication/x-javascriptidentify.mjsapplication/x-javascriptidentify_bundler.mjsapplication/x-javascriptidentify_compartments.mjsapplication/x-javascriptutils.mjsapplication/x-javascript