This file was generated on 2026-01-14 by Ben Swierzy


A GENERAL INFORMATION

1. Title of the dataset: Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"

2. Brief description of the research project and its aims: This dataset contains software artifacts for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". It includes all software artifacts (crawler, Aletheia implementation, evaluation scripts) used for analysis. For the re-implementation of Dolos (dolospy), please check the related material. 

3. Author Information
	A. Investigator Contact Information
		Name: Ben Swierzy
		Institution: Fraunhofer FKIE, University of Bonn
		Address: Friedrich-Hirzebruch-Allee 8, 53115 Bonn, Germany
		Email: swierzy@cs.uni-bonn.de

	C. In case of questions related to this dataset, please contact:
		Name: Ben Swierzy
		Institution: Fraunhofer FKIE, University of Bonn
		Address: Friedrich-Hirzebruch-Allee 8, 53115 Bonn, Germany
		Email: swierzy@cs.uni-bonn.de

4. Date of data collection: n/a

5. Information about funding sources that supported the collection of the data: n/a

6. Language of the dataset: English

7. Geographic location of data collection: n/a 



B DATA & FILE OVERVIEW

1. File List: 
	1.1 crawler: contains a microservice setup for crawling, that has been used to create the JavaScript bundle dataset (B.4.3)
	1.2 evaluation: Jupyter Notebooks used for evaluation
	1.3 scripts: scripts that apply the software composition analysis Aletheia (see C.3) and Dolos (see B.4.2) to the dataset (B.4.3)

2. Are there multiple versions of the dataset? no

3. Relationship between files: detailed information on the code available in USAGE.md 

4. Related datasets and sources:
	4.1 Github Repository: https://github.com/BlobbyBob/AletheiaJSVersionDetection 
	4.2 dolospy: https://doi.org/10.60507/FK2/LYIDHI
	4.3 Dataset used for analysis: https://doi.org/10.60507/FK2/AHYGMN



C SHARING/ACCESS INFORMATION

1. Was data derived from another source? no

2. Licenses/restrictions placed on the data: MIT

3. Links to publications that cite or use the data: https://doi.org/10.1145/3744916.3787780 

4. Links to other publicly accessible locations of the data: https://github.com/BlobbyBob/AletheiaJSVersionDetection 



D METHODOLOGICAL INFORMATION

1. Description of methods used for collection/generation of data: n/a

2. Methods for processing the data: n/a

3. Instrument- and/or software-specific information needed to interpret the data: n/a

4. People involved in sample collection, processing, analysis and/or submission: Ben Swierzy

5. Describe any quality-assurance procedures performed on the data: -

6. Standards and calibration information: - 

7. Environmental/experimental conditions: n/a