Dependency Practices for Vulnerability Mitigation

This is the replication package for our paper on dependency practices for mitigating vulnerabilities. Here is a short description of what is contained in this package: Vul. Extraction The code to extract vulnerability info from the npm advisories in json format. Data The preliminary datasets curated for the project. The raw data can be extracted from libraries.io and the npm advisories on github.com. Model Code The code for feature extraction, feature preprocessing and model training. Visualization Scripts The visualizer.py file includes the visualization scripts used for the paper. Analysis Code The analysis code used for findings of RQ1. Survey Responses The raw anonymized survey responses for RQ3.