On the public citation graph

On the Discoverability of npm Vulnerabilities in Node.js Projects

https://doi.org/10.1145/3571848
0 signed · 54 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-0-387-68560-1openalex-snapshot
Survival and Event History Analysis: A Process Point of View
inferredcites →https://doi.org/10.1007/s10664-017-9521-5openalex-snapshot
Do developers update their library dependencies?
inferredcites →https://doi.org/10.1007/s10664-017-9589-yopenalex-snapshot
An empirical comparison of dependency network evolution in seven software packaging ecosystems
inferredcites →https://doi.org/10.1007/s10664-020-09830-xopenalex-snapshot
Detection, assessment and mitigation of vulnerabilities in open source dependencies
inferredcites →https://doi.org/10.1007/s10664-021-09951-xopenalex-snapshot
Lags in the release, adoption, and propagation of npm vulnerability fixes
inferredcites →https://doi.org/10.1080/01621459.1958.10501452openalex-snapshot
Nonparametric Estimation from Incomplete Observations
inferredcites →https://doi.org/10.1109/52.311048openalex-snapshot
Effects of reuse on quality, productivity, and economics
inferredcites →https://doi.org/10.1109/asew.2015.21openalex-snapshot
When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies
inferredcites →https://doi.org/10.1109/icsm.2015.7332492openalex-snapshot
Impact assessment for vulnerabilities in open-source software libraries
inferredcites →https://doi.org/10.1109/icsme.2018.00054openalex-snapshot
Beyond Metadata: Code-Centric and Usage-Based Analysis of Known Vulnerabilities in Open-Source Software
inferredcites →https://doi.org/10.1109/icsme39734.2017openalex-snapshot
2017 IEEE International Conference on Software Maintenance and Evolution (ICSME)
inferredcites →https://doi.org/10.1109/icsme46990.2020.00014openalex-snapshot
An Empirical Study of Usages, Updates and Risks of Third-Party Libraries in Java Projects
inferredcites →https://doi.org/10.1109/icst.2017.28openalex-snapshot
JavaScript: The (Un)Covered Parts
inferredcites →https://doi.org/10.1109/msec.2022.3142338openalex-snapshot
Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations
inferredcites →https://doi.org/10.1109/msr52588.2021.00037openalex-snapshot
On the Use of Dependabot Security Pull Requests
inferredcites →https://doi.org/10.1109/saner.2019.8667984openalex-snapshot
On the Impact of Outdated and Vulnerable Javascript Packages in Docker Images
inferredcites →https://doi.org/10.1109/saner48275.2020.9054860openalex-snapshot
Automated Deprecated-API Usage Update for Android Apps: How Far are We?
inferredcites →https://doi.org/10.1109/saner50967.2021.00048openalex-snapshot
Empirical Analysis of Security Vulnerabilities in Python Packages
inferredcites →https://doi.org/10.1109/tse.2019.2918315openalex-snapshot
What Do Package Dependencies Tell Us About Semantic Versioning?
inferredcites →https://doi.org/10.1109/tse.2019.2952130openalex-snapshot
An Empirical Study of Dependency Downgrades in the npm Ecosystem
inferredcites →https://doi.org/10.1109/tse.2020.2988396openalex-snapshot
A3: Assisting Android API Migrations Using Code Examples
inferredcites →https://doi.org/10.1109/tse.2021.3068901openalex-snapshot
On the Untriviality of Trivial Packages: An Empirical Study of npm JavaScript Packages
inferredcites →https://doi.org/10.1145/236156.236184openalex-snapshot
How reuse influences productivity in object-oriented systems
inferredcites →https://doi.org/10.1145/2597073.2597074openalex-snapshot
The promises and perils of mining GitHub
inferredcites →https://doi.org/10.1145/2663716.2663755openalex-snapshot
The Matter of Heartbleed
inferredcites →https://doi.org/10.1145/2901739.2901743openalex-snapshot
A look at the dynamics of the JavaScript package ecosystem
inferredcites →https://doi.org/10.1145/3196398.3196401openalex-snapshot
On the impact of security vulnerabilities in the npm package dependency network
inferredcites →https://doi.org/10.1145/3236024.3236027openalex-snapshot
The impact of regular expression denial of service (ReDoS) in practice: an empirical study at the ecosystem scale
inferredcites →https://doi.org/10.1145/3324884.3421838openalex-snapshot
Code-based vulnerability detection in Node.js applications
inferredcites →https://doi.org/10.1145/3338906.3338940openalex-snapshot
Model-based testing of breaking changes in Node.js libraries
inferredcites →https://doi.org/10.1145/3372297.3417232openalex-snapshot
A Qualitative Study of Dependency Management and Its Security Implications
inferredcites →https://doi.org/10.1145/3447245openalex-snapshot
When and How to Make Breaking Changes
inferredcites →https://doi.org/10.1145/3468264.3468542openalex-snapshot
Detecting Node.js prototype pollution vulnerabilities via object lookup analysis
inferredcites →https://doi.org/10.1145/3510457.3513044openalex-snapshot
What are weak links in the npm supply chain?
inferredcites →https://doi.org/10.4230/lipics.ecoop.2018.7openalex-snapshot
On the Impact of Micro-Packages: An Empirical Study of the npm JavaScript Ecosystem
inferredcites →https://doi.org/10.48550/arxiv.2009.09019openalex-snapshot
On the Threat of npm Vulnerable Dependencies in Node.js Applications

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1007/978-3-031-75764-8_9openalex-snapshot
Adversarial Analysis of Software Composition Analysis Tools
inferred← citeshttps://doi.org/10.1007/978-981-96-0235-3_22openalex-snapshot
Hardening Linux Firewall Rules to Detect and Mitigate Vulnerabilities in Node.js Services
inferred← citeshttps://doi.org/10.1007/s10664-025-10638-wopenalex-snapshot
Securing dependencies: A comprehensive study of Dependabot’s impact on vulnerability mitigation
inferred← citeshttps://doi.org/10.1016/j.cose.2023.103625openalex-snapshot
Detecting prototype pollution for node.js: Vulnerability review and new fuzzing inputs
inferred← citeshttps://doi.org/10.1016/j.cose.2023.103669openalex-snapshot
Vulnerability impact analysis in software project dependencies based on Satisfiability Modulo Theories (SMT)
inferred← citeshttps://doi.org/10.1016/j.jss.2023.111752openalex-snapshot
Empirical analysis of security-related code reviews in npm packages
inferred← citeshttps://doi.org/10.1109/ic2e65552.2025.00032openalex-snapshot
OpenLambdaVerse: A Dataset and Analysis of Open-Source Serverless Applications
inferred← citeshttps://doi.org/10.1109/icse55347.2025.00054openalex-snapshot
Understanding and Detecting Peer Dependency Resolving Loop in npm Ecosystem
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00052openalex-snapshot
Understanding Software Vulnerabilities in the Maven Ecosystem: Patterns, Timelines, and Risks
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00064openalex-snapshot
Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks
inferred← citeshttps://doi.org/10.1109/saner64311.2025.00025openalex-snapshot
Analysing Software Supply Chains of Infrastructure as Code: Extraction of Ansible Plugin Dependencies
inferred← citeshttps://doi.org/10.1145/3597503.3623321openalex-snapshot
FuzzSlice: Pruning False Positives in Static Analysis Warnings through Function-Level Fuzzing
inferred← citeshttps://doi.org/10.1145/3660823openalex-snapshot
Dependency-Induced Waste in Continuous Integration: An Empirical Study of Unused Dependencies in the npm Ecosystem
inferred← citeshttps://doi.org/10.1145/3714464openalex-snapshot
Research Directions in Software Supply Chain Security
inferred← citeshttps://doi.org/10.1145/3798255openalex-snapshot
Determining the Unreachable: Constraint-Guided Reachability Analysis for Dependency Vulnerabilities
inferred← citeshttps://doi.org/10.1145/3832264openalex-snapshot
Paired Code Smells and Test Smells: A Fine-Grained Longitudinal Empirical Study
inferred← citeshttps://doi.org/10.1145/3832287openalex-snapshot
PatchPorter: LLM-Driven Security Patch Porting via Version Tracing and Context Selection for NPM
inferred← citeshttps://doi.org/10.2139/ssrn.6570860openalex-snapshot
DECODING SECURITY INCIDENTS IN NPM REPOSITORIES: AN EMPIRICAL STUDY ON OBFUSCATED THREATS AND SENSITIVE API MISUSE USING CODEQL
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.