This file was generated on 2026-01-14 by Ben Swierzy


A GENERAL INFORMATION

1. Title of the dataset: Replication Data for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"

2. Brief description of the research project and its aims: This dataset contains replication data for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". This includes metadata of the 6 weeks of Tranco top 100k scans. This does not include the dataset of JavaScript files (for legal reasons). For access to the scraped files, please message the corresponding author.

3. Author Information
	A. Investigator Contact Information
		Name: Ben Swierzy
		Institution: Fraunhofer FKIE, University of Bonn
		Address: Friedrich-Hirzebruch-Allee 8, 53115 Bonn, Germany
		Email: swierzy@cs.uni-bonn.de

	C. In case of questions related to this dataset, please contact:
		Name: Ben Swierzy
		Institution: Fraunhofer FKIE, University of Bonn
		Address: Friedrich-Hirzebruch-Allee 8, 53115 Bonn, Germany
		Email: swierzy@cs.uni-bonn.de

4. Date of data collection: 2024-10-31 - 2024-12-12 

5. Information about funding sources that supported the collection of the data: n/a

6. Language of the dataset: English

7. Geographic location of data collection: n/a 



B DATA & FILE OVERVIEW

1. File List: 
	1.1 metadata.tar.gz: Metadata (URLs, 

2. Are there multiple versions of the dataset? no

3. Relationship between files: n/a

4. Additional related data collected that was not included in the current data package: 
	4.1 Analysis scripts utilizing dolospy: https://doi.org/10.60507/FK2/F4VQRH
	4.2 dolospy: https://doi.org/10.60507/FK2/LYIDHI
	4.3 Github Repository: https://github.com/BlobbyBob/AletheiaJSVersionDetection 
	4.4 Scraped JavaScript Bundles: Please message the author for access



C SHARING/ACCESS INFORMATION

1. Was data derived from another source? yes: scans from Tranco top 100k https://tranco-list.eu/list/G6LKK

2. Licenses/restrictions placed on the data: CC BY 4.0

3. Links to publications that cite or use the data: 
	3.1 https://doi.org/10.1145/3744916.3787780
	3.2 https://arxiv.org/abs/2512.15447 (pre-print)

4. Links to other publicly accessible locations of the data: (none) 



D METHODOLOGICAL INFORMATION

1. Description of methods used for collection/generation of data: Web Crawling. For each Tranco Top 100k domain, we crawled the landing page using puppeteer every day for 6 weeks and recorded all loaded JavaScript resources. See publication C.3.1 and related analysis scripts B.4.1 for further details.

2. Methods for processing the data:
	2.1 Archive extraction using tar (https://www.gnu.org/software/tar/) and gzip (https://www.gnu.org/software/gzip/)
	2.2 For each file: Parsing of BSON using pymongo (https://pymongo.readthedocs.io/en/stable/api/bson/index.html#bson.decode_all) or py-bson (https://github.com/py-bson/bson). Import in MongoDB should be theoretically be possible as well
	2.3 Filenames contain the date of measurement
	2.4 Resulting dictionary structure:
	{
	  "domain": <domain-name>,
	  "time": <timestamp>,
	  "meta": [
	    {
	      "url": <url of resource>,
	      "type": <"js" or entry irrelevant>,
	      "status": <http status code>,
	      "source": <sha1 of source content>,
	      "sourceMap": <sha1 of source map if available>
	      "sourceMapUrl": <url of source map if available>
	    }
	  ]
	}

3. Instrument- and/or software-specific information needed to interpret the data: none

4. People involved in sample collection, processing, analysis and/or submission: Ben Swierzy

5. Describe any quality-assurance procedures performed on the data: -

6. Standards and calibration information: - 

7. Environmental/experimental conditions: Crawled using a single server with 6 public IPs from the network of the University of Bonn