Dependency Practices for Vulnerability Mitigation

<p>This is the replication package for our paper on dependency practices for mitigating vulnerabilities.</p> <p>Here is a short description of what is contained in this package:</p> <p><strong>Vul. Extraction</strong></p> <p>The code to extract vulnerability info from the npm advisories in json format.</p> <p><strong>Data</strong></p> <p>The preliminary datasets curated for the project. The raw data can be extracted from libraries.io and the npm advisories on github.com.</p> <p><strong>Model Code</strong></p> <p>The code for feature extraction, feature preprocessing and model training.</p> <p><strong>Visualization Scripts</strong></p> <p>The visualizer.py file includes the visualization scripts used for the paper.</p> <p><strong>Analysis Code</strong></p> <p>The analysis code used for findings of RQ1.</p> <p><strong>Survey Responses</strong></p> <p>The raw anonymized survey responses for RQ3.</p>