Cover Image

Opportunities and Security Risks of Technical Leverage: A Replication Study on the NPM Ecosystem

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Samaana, Haya, Costa, Diego Elias, Abdellatif, Ahmad, Shihab, Emad
Format:	Preprint
Published:	2024
Subjects:	Software Engineering
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

A Machine Learning-Based Approach For Detecting Malicious PyPI Packages
by: Samaana, Haya, et al.
Published: (2024)

The Impact of Environment Configurations on the Stability of AI-Enabled Systems
by: Rahman, Musfiqur, et al.
Published: (2024)

A Transformer-based Approach for Augmenting Software Engineering Chatbots Datasets
by: Abdellatif, Ahmad, et al.
Published: (2024)

Predicting the First Response Latency of Maintainers and Contributors in Pull Requests
by: Khatoonabadi, SayedHassan, et al.
Published: (2023)

Automatic Detection of LLM-Generated Code: A Comparative Case Study of Contemporary Models Across Function and Class Granularities
by: Rahman, Musfiqur, et al.
Published: (2024)

Is ChatGPT a Good Software Librarian? An Exploratory Study on the Use of ChatGPT for Software Library Recommendations
by: Latendresse, Jasmine, et al.
Published: (2024)

The Impact of Large Language Models (LLMs) on Code Review Process
by: Collante, Antonio, et al.
Published: (2025)

Understanding the Helpfulness of Stale Bot for Pull-based Development: An Empirical Study of 20 Large Open-Source Projects
by: Khatoonabadi, SayedHassan, et al.
Published: (2023)

An Approach for Auto Generation of Labeling Functions for Software Engineering Chatbots
by: Alor, Ebube, et al.
Published: (2024)

Towards Better Comprehension of Breaking Changes in the NPM Ecosystem
by: Kong, Dezhen, et al.
Published: (2024)

Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem
by: Tevarut, Napasorn, et al.
Published: (2025)

On Wasted Contributions: Understanding the Dynamics of Contributor-Abandoned Pull Requests
by: Khatoonabadi, SayedHassan, et al.
Published: (2021)

Contributing Back to the Ecosystem: A User Survey of NPM Developers
by: Wattanakriengkrai, Supatsara, et al.
Published: (2024)

A Preliminary Study on Self-Contained Libraries in the NPM Ecosystem
by: Jaisri, Pongchai, et al.
Published: (2024)

Will It Survive? Deciphering the Fate of AI-Generated Code in Open Source
by: Rahman, Musfiqur, et al.
Published: (2026)

Exploring the Potential of Llama Models in Automated Code Refinement: A Replication Study
by: Caumartin, Genevieve, et al.
Published: (2024)

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks
by: Yang-Smith, Corey, et al.
Published: (2025)

Leveraging Security Observability to Strengthen Security of Digital Ecosystem Architecture
by: Ramachandran, Renjith
Published: (2024)

Ecosystem-wide influences on pull request decisions: insights from NPM
by: Meijer, Willem, et al.
Published: (2024)

How Robust are LLM-Generated Library Imports? An Empirical Study using Stack Overflow
by: Latendresse, Jasmine, et al.
Published: (2025)

Evaluating the Use of LLMs for Automated DOM-Level Resolution of Web Performance Issues
by: Peters, Gideon, et al.
Published: (2026)

InEx-Bug: A Human Annotated Dataset of Intrinsic and Extrinsic Bugs in the NPM Ecosystem
by: Wright, Tanner, et al.
Published: (2026)

What About Our Bug? A Study on the Responsiveness of NPM Package Maintainers
by: Saeidi, Mohammadreza, et al.
Published: (2025)

On the Informativeness of Security Commit Messages: A Large-scale Replication Study
by: Islam, Syful, et al.
Published: (2026)

Towards Sustainable and Secure Reuse in Dependency Supply Chains: Initial Analysis of NPM packages at the End of the Chain
by: Reid, Brittany Anne, et al.
Published: (2025)

Self-Admitted Technical Debt in LLM Software: An Empirical Comparison with ML and Non-ML Software
by: Selvanayagam, Niruthiha, et al.
Published: (2026)

OpenClassGen: A Large-Scale Corpus of Real-World Python Classes for LLM Research
by: Rahman, Musfiqur, et al.
Published: (2025)

Automated File-Level Logging Generation for Machine Learning Applications using LLMs: A Case Study using GPT-4o Mini
by: Rodriguez, Mayra Sofia Ruiz, et al.
Published: (2025)

Evaluating the Use of LLMs for Documentation to Code Traceability
by: Alor, Ebube, et al.
Published: (2025)

Beyond Synthetic Benchmarks: Evaluating LLM Performance on Real-World Class-Level Code Generation
by: Rahman, Musfiqur, et al.
Published: (2025)

Decoding Dependency Risks: A Quantitative Study of Vulnerabilities in the Maven Ecosystem
by: Nachuma, Costain, et al.
Published: (2025)

The role of library versions in Developer-ChatGPT conversations
by: Raj, Rachna, et al.
Published: (2024)

Towards Supporting Open Source Library Maintainers with Community-Based Analytics
by: Raj, Rachna, et al.
Published: (2025)

Exploring the Lifecycle and Maintenance Practices of Pre-Trained Models in Open-Source Software Repositories
by: Koohjani, Matin, et al.
Published: (2025)

What's Inside a GitHub Repository? An Empirical Study on the Contents of 10K Projects
by: Hora, Andre, et al.
Published: (2026)

Understanding NPM Malicious Package Detection: A Benchmark-Driven Empirical Analysis
by: Guo, Wenbo, et al.
Published: (2026)

Analyzing the Accessibility of GitHub Repositories for PyPI and NPM Libraries
by: Tsakpinis, Alexandros, et al.
Published: (2024)

A Comprehensive Multi-Vocal Empirical Study of ML Cloud Service Misuses
by: Amor, Hadil Ben, et al.
Published: (2025)

Synergizing LLMs and Knowledge Graphs: A Novel Approach to Software Repository-Related Question Answering
by: Abedu, Samuel, et al.
Published: (2024)

Hidden Licensing Risks in the LLMware Ecosystem
by: Wang, Bo, et al.
Published: (2026)