Artifacts - Understanding npm Developers’ Practices, Challenges, and Recommendations for Secure Package Development

This is the dataset for the paper: Understanding npm Developers’ Practices, Challenges, and Recommendations for Secure Package DevelopmentThis paper was accepted for publication at the 19th IEEE/ACM International Conference on Cooperative and Human Aspects of Software Engineering (CHASE 2026) - Research TrackOverviewBelow describes the artifacts associated with this study.SurveyResponses.sqlite --- Survey responses in Sqlite database.SurveyQuestionnaire.pdf --- Survey questionnaire, including response options, utilized in the study.Survey_Free_Text_Reponses_Categorized_Thematic_Analysis.xlsx --- Results of the thematic analysis for the free-text questions.Singlechoice-ranking-questions.xlsx --- Results of the single-choice and ranking question types.code/MultiChoiceAnalysis.py --- Class that builds frequency tables for single and multi-choice questions, computes average/median number of choices, performs pair/triplet combination analysis, and saves CSV/text outputs to multichoice-questions/.main-npmPackageSecurity.py --- Main orchestration script. Reads SurveyResponses.csv, runs MultiChoiceAnalysis, generates Likert charts (via plot_likert) and saves PDFs to likert-figures/.SurveyResponses.csv --- Survey responses in CSV (input).likert-figures/ --- Output folder (created by main-npmPackageSecurity.py) containing generated Likert PDF figures.multichoice-questions/ --- Output folder (created by MultiChoiceAnalysis.py) containing:single-choice and multi-choice frequency CSVscombination analysis CSVs for pairs/tripletssummary text files with average/median choicesCode OutputsLikert chart PDFs: saved to likert-figures/Frequency and combination CSVs + stats: saved to multichoice-questions/Code Dependenciespandasmatplotlibplot_likertCode executionPlace SurveyResponses.csv in the project parent directory.From project root run:python code/main-npmPackageSecurity.pyThis will create likert-figures/ and multichoice-questions/ and write outputs.NotesVerify column names in SurveyResponses.csv match those referenced in the scripts before running.Output folders are created automatically by the scripts if missing.