<?xml version='1.0' encoding='UTF-8'?><metadata xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns="http://dublincore.org/documents/dcmi-terms/"><dcterms:title>Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"</dcterms:title><dcterms:identifier>https://doi.org/10.60507/FK2/F4VQRH</dcterms:identifier><dcterms:creator>Swierzy, Ben</dcterms:creator><dcterms:publisher>bonndata</dcterms:publisher><dcterms:issued>2026-01-22</dcterms:issued><dcterms:modified>2026-01-22T11:48:09Z</dcterms:modified><dcterms:description>This dataset contains software artifacts for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web".

It includes all software artifacts (crawler, Aletheia implementation, evaluation scripts) used for analysis. For the re-implementation of Dolos (dolospy), please check the related material.</dcterms:description><dcterms:subject>Computer and Information Science</dcterms:subject><dcterms:language>English</dcterms:language><dcterms:IsSupplementTo>Ben Swierzy, Marc Ohm, and Michael Meier. 2026. Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web. In 2026 IEEE/ACM 48th International Conference on Software Engineering (ICSE ’26), April 12–18, 2026, Rio de Janeiro, Brazil. ACM, New York, NY, USA, 13 pages. https://doi.org/10.1145/3744916.3787780, doi, 10.1145/3744916.3787780, https://dl.acm.org/doi/abs/10.1145/3744916.3787780</dcterms:IsSupplementTo><dcterms:IsSupplementTo>Swierzy, Ben, Marc Ohm, and Michael Meier. "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web." arXiv preprint arXiv:2512.15447 (2025)., doi, 10.48550/arXiv.2512.15447, https://arxiv.org/abs/2512.15447</dcterms:IsSupplementTo><dcterms:date>2026-01-22</dcterms:date><dcterms:contributor>Swierzy, Ben</dcterms:contributor><dcterms:dateSubmitted>2026-01-09</dcterms:dateSubmitted><dcterms:relation>Internet Measurement Dataset: https://doi.org/10.60507/FK2/AHYGMN</dcterms:relation><dcterms:type>program source code</dcterms:type><dcterms:license>MIT</dcterms:license></metadata>