Dependency Practices for Vulnerability Mitigation

This is the replication package for our paper on dependency practices for mitigating vulnerabilities. Here is a short description of what is contained in this package: <strong>Vul. Extraction</strong> The code to extract vulnerability info from the npm advisories in json format. <strong>Data</strong> The preliminary datasets curated for the project. The raw data can be extracted from libraries.io and the npm advisories on github.com. <strong>Model Code</strong> The code for feature extraction, feature preprocessing and model training. <strong>Visualization Scripts</strong> The visualizer.py file includes the visualization scripts used for the paper. <strong>Analysis Code</strong> The analysis code used for findings of RQ1. <strong>Survey Responses</strong> The raw anonymized survey responses for RQ3.