GRASP Neo4j database dump: BRON and the GRASP overlay

Neo4j database dump of GRASP (GRaph-Augmented riSk Processing), the dataset of the paper "GRASP: Organization-Level Vulnerability Exposure in Open-Source Supply Chains" (Aboumadi, Salem, Mohaisen, Badawy). It is the exact graph analysed in the paper. The database contains two layers: the BRON cybersecurity knowledge graph (CVEs, weaknesses, attack patterns, ATT&CK techniques, threat groups, mitigations, CISA KEV) and the GRASP overlay: 72 CNCF organizations, 1,038 repositories, 67,201 package versions and their links to 2,635 CVEs. How to use it: install Neo4j Desktop (Neo4j 2026.01 or newer), create an instance, create a database, and load bron.dump with "Load database from file". Full instructions, the code that builds the graph, and example queries: https://github.com/madi-bit/GRASP-Organization-Level-Vulnerability-Exposure-in-Open-Source-Supply-Chains File: bron.dump, 398,334,802 bytes. SHA-256: aac88bb53326c5ac357be94fd5b89594a18960d8fe32a06edba64aa8741aaced Licence: the authors' contribution (the GRASP overlay) is released under CC BY 4.0. The dump also contains data derived from third-party sources (NVD, OSV, EPSS, CISA KEV, MITRE ATT&CK, CWE, CAPEC and the BRON knowledge graph). That data remains under the terms of its original providers, which may require attribution.