Dependency Practices for Vulnerability Mitigation

This is the replication package for our paper on dependency practices for mitigating vulnerabilities.

Here is a short description of what is contained in this package:

Vul. Extraction

The code to extract vulnerability info from the npm advisories in json format.

Data

The preliminary datasets curated for the project. The raw data can be extracted from libraries.io and the npm advisories on github.com.

Model Code

The code for feature extraction, feature preprocessing and model training.

Visualization Scripts

The visualizer.py file includes the visualization scripts used for the paper.

Analysis Code

The analysis code used for findings of RQ1.

Survey Responses

The raw anonymized survey responses for RQ3.