Find research datasets worth reusing
Search datasets from major research repositories and use ShareScore to quickly assess how well each record supports discovery, access, and reuse.
9
datasets available to search
ShareScore release 0.9.0
Dataset results
9 results for “npm,dependencies”
NPM 100k and 300k dependency data
<p>This is the dependency data for the top 100000 and top 300000 packages (in lexicographic order) with the following structure:</p> <pre><code class="language-json">{"pkgs":[{ "name": "react", "versions": { "1.00": { "timestamp": "06-05-2022T10:00:01", "dependencies": { "name": "^1.0.2" } } } }, ... ]}</code></pre> <p> </p>
Dependency networks of PyPI, npm, CRAN and Bioconductor repositories
<p>A set of datasets with a list of dependencies from the software repositories PyPI, npm, CRAN and Bioconductor.</p>
Replication Package for "On the impact of security vulnerabilities in the npm package dependency network
<p>This is the replication package for paper "On the impact of security vulnerabilities in the npm package dependency network" accepted for publication in MSR 2018.</p>
On the evolution of technical lag in the npm package dependency network
<p>This is the replication package for paper "On the evolution of technical lag in the npm package dependency network" accepted for publication in ICSME 2018.</p>
npm dependencies of October 2018
<p>npm dependencies with the actual used version, computed for 14 October 2018 using the semver.org implementation in npm. </p>
Not All Dependencies are Equal: An Empirical Study on Production Dependencies in NPM
<p>This dataset contains the data and scripts we used to conduct our study on production dependencies in npm. </p> <p>js_projects.zip contains 100 JavaScript projects mined from GitHub in November 2021. </p> <p>data_and_scripts.zip contains data on all installed dependencies from the 100 JavaScript projects and the scripts to process the data and obtain the results for our study. See the README file for more details. </p>
10k NPM packages with their versions, and the timestamp and dependencies per version
<p>10000 NPM packages with their versions, and the timestamp and dependencies per version, in the following format:</p> <p> </p> <pre><code class="language-json">{ "name": "react", "versions": { "1.00": { "timestamp": "06-05-2022T10:00:01", "dependencies": { "name": "^1.0.2" } } } }</code></pre> <p> </p>
npm and Maven dependencies
<p>This dataset includes npm and Maven dependencies with the list of package releases.</p>
On the Threat of npm Vulnerable Dependencies in Node.js Applications
<p><strong>PAPER ABSTRACT</strong></p> <p>Software vulnerabilities have a large negative impact on the software systems that we depend on daily. Reports on software vulnerabilities always paint a grim picture, with some reports showing that 83% of organizations depend on vulnerable software. However, our experience leads us to believe that, in the grand scheme of things, these software vulnerabilities may have less impact than what is reported. Therefore, we perform a study to better understand the threat of npm vulnerable packages used in Node.js applications. We define three threat levels for vulnerabilities in packages, based on their lifetime, where a package vulnerability is assigned a low threat level if it was hidden or still unknown at the time it was used in the dependent application (t), medium threat level if the vulnerability was reported but not yet published at t, and high if it was publicly announced at t. Then, we perform an empirical study involving 6,673 real-world, active, and mature open source Node.js applications. Our findings show that although 67.93% of the examined applications depend on at least one vulnerable package, 94.91% of the vulnerable packages in those affected applications are classified as having low threat. Moreover, we find that in the case of vulnerable packages classified as having high threat, it is the application's lack of updating that makes them vulnerable, i.e., it is not the existence of the vulnerability that is the real problem. Furthermore, we verify our findings at different stages of the application's lifetime and find that our findings still hold. Our study argues that when it comes to software vulnerabilities, things may not be as bad as they seem and that considering vulnerability threat is key.</p> <p><strong>THE PACKAGE CONTAINS THE FOLLOWING:</strong></p> <ol> <li>The data of the studied Node.js applications.</li> <li>The data of the npm vulnerable packages (advisories).</li> <li>The data of version releases for the npm vulnerable packages.</li> <li>The scripts used for analyzing the data.</li> </ol>
ScienceDex guides
Understand access before you commit
These curated guides explain access requirements, typical timelines, costs, and reuse considerations for widely used research datasets.
Allen Brain Atlas
Allen Brain Atlas is an Allen Institute collection of brain map atlases, datasets, APIs, and analysis tools covering mouse, human, and non-human primate brain resources.
Annotated Behaviour and Observability Dataset (ABODe)
ABODe is a University of Edinburgh DataShare dataset for behavior classification in group-housed mice using home-cage video, identities, bounding boxes, ground-plate positions, and annotator labels.
DANDI Archive for NWB datasets
DANDI is a BRAIN Initiative archive for publishing and sharing neurophysiology data, including electrophysiology, optophysiology, and behavioral data packaged as NWB and related standards.
International Brain Laboratory public data
The International Brain Laboratory public data releases expose standardized mouse decision-making experiments, including Neuropixels recordings, widefield calcium imaging, behavior, and session metadata accessed through the ONE API.
OpenNeuro
OpenNeuro is a free, open platform for sharing neuroimaging datasets, with public search, dataset pages, and download paths for web, S3, DataLad, and the OpenNeuro CLI.