Dataset for Paper: What's in a Package? Getting Visibility Into Dependencies Using Security-Sensitive API Calls

What’s in a Package? Getting Visibility Into Dependencies Using Security-Sensitive API Calls The goal of this study is to aid developers in gaining more visibility into a package and in selecting their dependency by understanding \sensapis in their dependency through call graph analysis. Submitted to ICSE 2026. This repository contains Jupyter notebooks for analyzing sensitive API usage patterns. Code: the codes used in the analysis Data: security sensitive APIs data, including call graphs data, survey results, figures for the paper, etc.