1 to 7 of 7 Results
Jan 30, 2026
Ohm, Marc; Pohl, Timo; Swierzy, Ben; Meier, Michael, 2026, "Replication Code for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"", https://doi.org/10.60507/FK2/TNJHGT, bonndata, V1
Scripts for reproducing cache files in Python packages. This includes an automated Docker-based setup for running old Python versions with bytecode compilation and tools for automatic and manual cache file comparisons. Additionally, proofs of concept are included |
Jan 30, 2026
Ohm, Marc; Pohl, Timo; Swierzy, Ben; Meier, Michael, 2026, "Replication Data for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"", https://doi.org/10.60507/FK2/EADABS, bonndata, V1
The dataset contains Package-URLs (PURLs) and SHA-256 checksums of Python packages from PyPI which contain at least one cache file (*.pyc). |
Jan 22, 2026
Swierzy, Ben, 2026, "Replication Software for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"", https://doi.org/10.60507/FK2/F4VQRH, bonndata, V1
This dataset contains software artifacts for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". It includes all software artifacts (crawler, Aletheia implementation, evaluation scripts) used for analysis. For the re-implementation of Dolos (dolospy), please check the related material. |
Jan 22, 2026
Swierzy, Ben, 2026, "dolospy", https://doi.org/10.60507/FK2/LYIDHI, bonndata, V1
This repository contains a re-implementation of the rolling AST hash algorithm from Dolos (https://dolos.ugent.be/) in C++ with Python bindings. It is 8x faster for indexing and 10,000x faster in reporting compared to the original JavaScript implementation (cf. BENCHMARKING.md). |
Jan 22, 2026
Swierzy, Ben, 2026, "Replication Data for "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web"", https://doi.org/10.60507/FK2/AHYGMN, bonndata, V1
This dataset contains replication data for the paper "Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web". This includes metadata of the 6 weeks of Tranco top 100k scans. This does not include the dataset of JavaScript files (for legal reasons). For access to the scraped files, please message the co... |
Jan 14, 2025
Leiwig, Maximilian; Swierzy, Ben; Bungartz, Christian; Meier, Michael, 2024, "Replication data for "Analyzing the Potency of Pretrained Transformer Models for Automated Program Repair"", https://doi.org/10.60507/FK2/O54LWP, bonndata, V2
This repository contains replication data for the paper "Analyzing the Potency of Pretrained Transformer Models for Automated Program Repair". The dataset contains commits that indicate a bug fix from 200 repositories on Github. Scripts for fetching data associated with the commits are available (see Github repository linked under "Related Material... |
Oct 22, 2024
Vogel, Daniel; Viola, Felix; Kreimeyer, Nicholas Malte, 2024, "Uni Bonn Probe Request Data Set", https://doi.org/10.60507/FK2/TXOWTX, bonndata, V1
A data set of probe requests captured from various smartphones with and without MAC address randomization enabled |
