Dataset for Cross Ecosystsem Case Control Studies in CyberSecurity

This project generates matched case-control samples for an ecosystem security study. The goal is to compare vulnerable package versions (`case`) against non-selected comparison versions (`control`) under similar package and timing characteristics. The repository contains: manually annotated dataset of libraries in Java/Maven with the corresponding type in Pythpn/PyPI Automatically annotated dataset of libraries in Python/PyPI The detailed mapping of the manual annotators input datasets split into case and control groups two matching algorithms for building case-control samples runner scripts that execute repeated random matching trials The work is published in Y. Feng, R. Paramitha, C.E. Budde, F.Massacci. A methodology to perform cross-ecosystems case-control security studies: Java/Maven vs Python/PyPI. Empirical Software Engineering. 2026. Springer Nature. DOI: 10.1007/s10664-026-10873-9