Imagen de Portada

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Ghosh, Rajdeep, De, Shiladitya, Mondal, Mainack
Formato:	Preprint
Publicado:	2025
Materias:	Cryptography and Security
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Classifying Issues in Open-source GitHub Repositories
por: Raaj, Amir Hossain, et al.
Publicado: (2025)

On Categorizing Open Source Software Security Vulnerability Reporting Mechanisms on GitHub
por: Kancharoendee, Sushawapak, et al.
Publicado: (2025)

What if it wasn't normal pressure glaucoma?
por: Amira Mabrouk, et al.
Publicado: (2025)

Understanding Prompt Management in GitHub Repositories: A Call for Best Practices
por: Li, Hao, et al.
Publicado: (2025)

RepoMaster: Autonomous Exploration and Understanding of GitHub Repositories for Complex Task Solving
por: Wang, Huacan, et al.
Publicado: (2025)

OCR finds remediation plan wasn’t retaliatory
Publicado: (2026)

Europe. Guess who wasn't coming to dinner?
Publicado: (2001)

The dire wolf (Aenocyon dirus) resurrection that wasn't
por: Michael I. Jensen‐Seaman, et al.
Publicado: (2025)

Forecasting the Maintained Score from the OpenSSF Scorecard: A Study of GitHub Repositories Linked to PyPI Packages
por: Tsakpinis, Alexandros, et al.
Publicado: (2026)

Analyzing the Accessibility of GitHub Repositories for PyPI and NPM Libraries
por: Tsakpinis, Alexandros, et al.
Publicado: (2024)

GitHub Repository Complexity Leads to Diminished Web Archive Availability
por: Calano, David, et al.
Publicado: (2025)

Replication Package - How Far From the Metaphor? The Diverse Understandings of Technical Debt in GitHub Issues
por: Cavalcante, Iury
Publicado: (2025)

Chapter 11 ‘I wasn’t aware at the time, I could actually say “no”’
por: Donovan, Catherine, et al.
Publicado: (2023)

LLM-Enabled Open-Source Systems in the Wild: An Empirical Study of Vulnerabilities in GitHub Security Advisories
por: Shifat, Fariha Tanjim, et al.
Publicado: (2026)

SWE-Fixer: Training Open-Source LLMs for Effective and Efficient GitHub Issue Resolution
por: Xie, Chengxing, et al.
Publicado: (2025)

Unpacking Security Scanners for GitHub Actions Workflows
por: Fares, Madjda, et al.
Publicado: (2026)

Security Vulnerabilities in AI-Generated Code: A Large-Scale Analysis of Public GitHub Repositories
por: Schreiber, Maximilian, et al.
Publicado: (2025)

How Complex is a GitHub Issue?
por: Anonymous
Publicado: (2025)

Mapping GitHub Sponsorships: A Longitudinal Observatory for Open-Source Sustainability
por: Hiltz, Rylan, et al.
Publicado: (2026)

Engineering Students' Usage and Perceptions of GitHub Copilot in Open-Source Projects
por: Rani, Neha, et al.
Publicado: (2026)

LLM-based Content Classification Approach for GitHub Repositories by the README Files
por: Mehmood, Malik Uzair, et al.
Publicado: (2025)

CAM: A Collection of Snapshots of GitHub Java Repositories Together with Metrics
por: Bugayenko, Yegor
Publicado: (2024)

Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub
por: Masud, Md Rayhanul, et al.
Publicado: (2024)

Imago GitHub training
por: Elsey, Jonathan
Publicado: (2026)

GitHub Proxy Server: A tool for supporting massive data collection on GitHub
por: Borges, Hudson Silva, et al.
Publicado: (2025)

LEAN-GitHub: Compiling GitHub LEAN repositories for a versatile LEAN prover
por: Wu, Zijian, et al.
Publicado: (2024)

Understanding and Detecting Flaky Builds in GitHub Actions
por: Ge, Wenhao, et al.
Publicado: (2026)

Understanding and Predicting Derailment in Toxic Conversations on GitHub
por: Imran, Mia Mohammad, et al.
Publicado: (2025)

GitHub Repository of an Open-Source Analog-Mixed Signal Chip Design Template for the ihp-sg13g2 Open-PDK
por: Dorrer, Simon, et al.
Publicado: (2026)

Incivility in Open Source Projects: A Comprehensive Annotated Dataset of Locked GitHub Issue Threads
por: Ehsani, Ramtin, et al.
Publicado: (2024)

HD3191, the high-mass X-ray binary that wasn't there
por: Rauw, Gregor, et al.
Publicado: (2026)

Characterizing and Modeling the GitHub Security Advisories Review Pipeline
por: Segal, Claudio, et al.
Publicado: (2026)

Visual Analysis of GitHub Issues to Gain Insights
por: Proma, Rifat Ara, et al.
Publicado: (2024)

How do GitHub Repositories Support Software Engineering Candidates to Prepare for Interviews?
por: Anonymous Researcher
Publicado: (2026)

On the Footprints of Reviewer Bots Feedback on Agentic Pull Requests in OSS GitHub Repositories
por: Fatima, Syeda Kaneez, et al.
Publicado: (2026)

METXico Innovation CODE GitHub
por: Xool-Tamayo, Jorge, et al.
Publicado: (2023)

Guidelines for Developing Bots for GitHub
por: Wessel, Mairieli, et al.
Publicado: (2022)

Prioritising GitHub Priority Labels
por: Caddy, James, et al.
Publicado: (2024)

“I wasn't broken”: Addressing stigma associated with dementia while Walking the Talk for Dementia
por: Kate Irving, et al.
Publicado: (2026)

Understanding npm Developers' Practices, Challenges, and Recommendations for Secure Package Development
por: Peruma, Anthony, et al.
Publicado: (2026)