"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages | Paper Citation Record

Observation e16878f0-75ea-4e7c-b50b-373acd51dc0f · outbound

This paper cites https://github.com/ expressjs/express/pull/2748.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ expressjs/express/pull/2748

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:40.440293Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b17d262b-1d24-4602-aa2e-c34e8f62a49a · outbound

This paper cites https://github.com/ MetaMask/snaps/issues/1018.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ MetaMask/snaps/issues/1018

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:40.546751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d8472d26-2fc2-4bc8-98d4-21521fce78a8 · outbound

This paper cites https:// github.com/netlify/build/issues/193.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https:// github.com/netlify/build/issues/193

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:40.693826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bc24dc12-c1ff-48e0-b9e5-890be0515805 · outbound

This paper cites https://github.com/ joystream/joystream/issues/2969.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ joystream/joystream/issues/2969

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:40.809383Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c47fda32-40d5-44d8-a662-c60963b1bc0f · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:40.967411Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f1ef97b1-b794-40d1-b8cf-9e29aee9d3ff · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.032834Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ad2bcb64-2913-4513-9c19-631092f3c4dd · outbound

This paper cites https://github.com/ apollographql/apollo-client/issues/3592.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ apollographql/apollo-client/issues/3592

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.230648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 61b74129-5669-4bb9-90cd-7f7d067a4d98 · outbound

This paper cites https://github.com/ SAP/spartacus/issues/4725.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ SAP/spartacus/issues/4725

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.359681Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dc66e0c8-4811-4631-9b50-8c0d1ea5555b · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.470169Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d8bdad13-d21e-476f-b651-4609f7b99094 · outbound

This paper cites https://github.com/ SonarSource/SonarJS/issues/4467.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ SonarSource/SonarJS/issues/4467

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.544457Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1dbc76da-f7a7-43df-8cf8-14897fd1f039 · outbound

This paper cites https://github.com/angular/angular/issues/ 37442.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/angular/angular/issues/ 37442

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.679658Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 69a753ea-c424-4e9a-9e90-cf5e7dd0c117 · outbound

This paper cites https://github.com/dotnet/aspnetcore/ issues/54412#issuecomment-1992596067.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/dotnet/aspnetcore/ issues/54412#issuecomment-1992596067

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.808884Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eacdff1f-bbf8-4a41-86a7-da36d3b3d6b9 · outbound

This paper cites https://github.com/apache/superset/pull/ 30200.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/apache/superset/pull/ 30200

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:41.942210Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ba97819-f99b-4f15-9315-c7876b3153ee · outbound

This paper cites · issue #98 · ollionorg/flow- core.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages · issue #98 · ollionorg/flow- core

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.135728Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7fb9b52f-68ed-481b-89fd-52af4a6051ea · outbound

This paper cites https://docs.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://docs

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.243303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b51e31f7-a3e6-4afb-a492-0900e831ce1e · outbound

This paper cites https://github.com/pulumi/ pulumi-azure-native/issues/2408.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/pulumi/ pulumi-azure-native/issues/2408

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.368557Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f880d0d2-f5dc-4e7a-9a30-282b0175bd26 · outbound

This paper cites https: //github.com/grafana/grafana/issues/15591.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https: //github.com/grafana/grafana/issues/15591

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.520795Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 27c64c69-af44-42d0-95ce-3fcb927f20e4 · outbound

This paper cites nonetype.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages nonetype

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.623482Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 11d7fd85-76fb-452c-9f0e-5c4aecf07297 · outbound

This paper cites https://github.com/ strapi/strapi/issues/12320.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ strapi/strapi/issues/12320

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.828654Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6259b4e5-f6bc-481a-8305-e20c8eb4ff04 · outbound

This paper cites https://github.com/ dotnet/aspnetcore/issues/56656.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ dotnet/aspnetcore/issues/56656

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:42.902316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9b645709-4c31-43eb-bae5-39a8d8bca017 · outbound

This paper cites https://github.com/pulumi/pulumi/issues/ 8946#issuecomment-1005987646.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/pulumi/pulumi/issues/ 8946#issuecomment-1005987646

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:43.032576Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1bfa28e9-5b46-4cf8-9ff7-695db8103b05 · outbound

This paper cites https://docs.npmjs.com/ cli/v8/using-npm/registry.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://docs.npmjs.com/ cli/v8/using-npm/registry

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:43.227655Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01a873f0-9d42-4812-9d65-86b2a65a300d · outbound

This paper cites https://github.com/expo/expo/ issues/19018.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/expo/expo/ issues/19018

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:43.360179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1680f08b-3a21-49a0-95e1-59bbb1237f87 · outbound

This paper cites https://github.com/grafana/ grafana/issues/1619.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/grafana/ grafana/issues/1619

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:43.398508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 10766286-1100-4635-b7a4-aee1b8cfff06 · outbound

This paper cites https://github.com/ Automattic/wp-calypso/issues/7017.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github.com/ Automattic/wp-calypso/issues/7017

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:43.468190Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba42db72-e800-432a-bec9-49119d304507 · outbound

This paper cites @storybook/addon-info > marksy > marked.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages @storybook/addon-info > marksy > marked

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.108730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a7e262ff-605f-40ff-a612-ea38e712d847 · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.102810Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3b25415c-e6b7-4160-9a27-e4ad38c443a7 · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.097127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 23fd9574-32d6-4f23-99d9-49e70b0097ec · outbound

This paper cites https:// github.com/Agoric/agoric-sdk/issues/6071.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https:// github.com/Agoric/agoric-sdk/issues/6071

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.090842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation dec9b6dc-3311-48a6-b45f-cc1b814722b3 · outbound

This paper cites https://github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages https://github

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.084756Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 322f2504-ecd7-4c0a-81d7-9198b11b35b5 · outbound

This paper cites IEEE Press, 2017.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages IEEE Press, 2017

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.078975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 41bc1807-a2bc-4d2e-b270-99e44c9b9567 · outbound

This paper cites Asso- ciation for Computing Machinery.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Asso- ciation for Computing Machinery

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.073277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2fcd1dc3-e327-47e7-a6f1-c3bf32370910 · outbound

This paper cites Gerosa, and Emad Shihab.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Gerosa, and Emad Shihab

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.067426Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9a4629cf-83f3-4d4b-ac16-50652e4c65f9 · outbound

This paper cites Understanding the [cls] token in bert: A com- prehensive guide, 2021.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Understanding the [cls] token in bert: A com- prehensive guide, 2021

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.061859Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f62a71e1-d269-4e28-9fdc-b1f173b18797 · outbound

This paper cites Optuna: A next- generation hyperparameter optimization framework, 2019.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Optuna: A next- generation hyperparameter optimization framework, 2019

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.055784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c3c257a0-13a7-414d-9153-fa01e085b11e · outbound

This paper cites On the discoverability of npm vul- nerabilities in node.js projects.ACM Trans.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On the discoverability of npm vul- nerabilities in node.js projects.ACM Trans

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.049572Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 635f233a-c43c-46dc-98e4-111eb95cac53 · outbound

This paper cites Qwen Technical Report.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Qwen Technical Report

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:44.987784Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 08fd54a4-1c98-47d6-9662-ddb0a986b92f · outbound

This paper cites Buck and Devon F.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Buck and Devon F

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.043195Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f53cb871-aa76-44ba-92ac-810dfe1df99a · outbound

This paper cites an unresolved cited work.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Unresolved cited work

Reference 40

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:33:56.037431Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 89fda9f7-ad84-49ab-857f-ae11e1f286f2 · outbound

This paper cites Exploring the use of labels to categorize issues in open-source software projects.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Exploring the use of labels to categorize issues in open-source software projects

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.031670Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2ef43184-b32b-4cb2-ab0c-13dbfbf971f0 · outbound

This paper cites Chi, Jeff Dean, Jacob Devlin, Adam Roberts, Denny Zhou, Quoc V.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Chi, Jeff Dean, Jacob Devlin, Adam Roberts, Denny Zhou, Quoc V

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.025158Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0c34843e-6d03-4b28-bbb4-0b82b4983748 · outbound

This paper cites Ali Babar.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Ali Babar

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.019022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 09a94795-3325-4462-9fe0-1e57a46df3f0 · outbound

This paper cites An em- pirical study of blockchain repositories in github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages An em- pirical study of blockchain repositories in github

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.012804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b9e33353-77ba-44ef-9af2-43289c6fe664 · outbound

This paper cites On the impact of security vulnerabilities in the npm package dependency network.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On the impact of security vulnerabilities in the npm package dependency network

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.006648Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation cecc590e-8b6e-477e-b266-ce9259cd030e · outbound

This paper cites An empirical comparison of dependency network evo- lution in seven software packaging ecosystems.Em- pirical Software Engineering, 24:381–416, 2019.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages An empirical comparison of dependency network evo- lution in seven software packaging ecosystems.Em- pirical Software Engineering, 24:381–416, 2019

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:56.000506Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation fd97cb79-6632-4e80-adc4-a8e8e87e9a7d · outbound

This paper cites On the use of github actions in software development repositories.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On the use of github actions in software development repositories

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.994312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6c7af539-2118-4852-bc76-30879fde8b11 · outbound

This paper cites On measuring affects of github issues’ commenters.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On measuring affects of github issues’ commenters

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.988146Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e73190ed-3068-46d3-b61b-66c64d255fe9 · outbound

This paper cites BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:46.400805Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 72af73da-db9c-49cc-92ca-49e90febca14 · outbound

This paper cites Detecting and characterizing bots that com- mit code.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Detecting and characterizing bots that com- mit code

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.981558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4ae2afcf-9b56-47ed-b4cd-e72a76379242 · outbound

This paper cites Diniz, Daniel Cruz, Fabio Ferreira, Cleiton Tavares, and Eduardo Figueiredo.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Diniz, Daniel Cruz, Fabio Ferreira, Cleiton Tavares, and Eduardo Figueiredo

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.974938Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b77e9946-aef8-4b40-99d1-e5e6461d52c6 · outbound

This paper cites Managing labels.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Managing labels

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.968672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3a750f92-8ddd-41de-b155-bd506b76d32c · outbound

This paper cites Ethical issues in qualitative research on internet communities.BMJ, 323(7321):1103–1105, 2001.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Ethical issues in qualitative research on internet communities.BMJ, 323(7321):1103–1105, 2001

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.962767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation fc1e8a38-5bce-463a-9a68-d9a552707b59 · outbound

This paper cites CodeBERT: A Pre-Trained Model for Programming and Natural Languages.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages CodeBERT: A Pre-Trained Model for Programming and Natural Languages

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:46.969767Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb226e63-1368-46f2-9079-897f62a88e32 · outbound

This paper cites Containing malicious package up- dates in npm with a lightweight permission system.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Containing malicious package up- dates in npm with a lightweight permission system

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.955909Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation eaeac2b9-8420-4b8e-bf61-bfa0187fede3 · outbound

This paper cites Codeql: Semantic code analysis engine.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Codeql: Semantic code analysis engine

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.950016Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 473df1d7-a8ec-455a-91fe-f9eaf7997b16 · outbound

This paper cites Dependabot: Keep your dependencies up to date.https://github.com/dependabot.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Dependabot: Keep your dependencies up to date.https://github.com/dependabot

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.943727Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ca47ba53-0daa-4b38-805b-2ba6fd31a318 · outbound

This paper cites Github marketplace.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Github marketplace

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.937407Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8e89d3da-bfab-4b70-8572-3e7eb1001745 · outbound

This paper cites Privately reporting a security vulnerability.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Privately reporting a security vulnerability

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.930898Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4bb5d245-10e0-4f20-9096-f05eb0befda4 · outbound

This paper cites A ground-truth dataset and clas- sification model for detecting bots in github issue and pr comments.Journal of Systems and Software, 175:110911, 2021.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages A ground-truth dataset and clas- sification model for detecting bots in github issue and pr comments.Journal of Systems and Software, 175:110911, 2021

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.924579Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2fdef1f8-179b-480d-9370-f6e01eca5822 · outbound

This paper cites Recogniz- ing bot activity in collaborative software development.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Recogniz- ing bot activity in collaborative software development

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.918734Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ebab792d-e57b-4f6f-b456-db0c596b2a55 · outbound

This paper cites Outside the comfort zone: Analysing llm capabilities in software vulnerability detection.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Outside the comfort zone: Analysing llm capabilities in software vulnerability detection

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.912490Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b8bf9321-6325-49e4-864d-46803c4c62a1 · outbound

This paper cites an unresolved cited work.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Unresolved cited work

Reference 63

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:33:55.905908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 878cfebf-5f4a-420c-972f-1578cfde4f34 · outbound

This paper cites DeBERTa: Decoding-enhanced BERT with Disentangled Attention.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages DeBERTa: Decoding-enhanced BERT with Disentangled Attention

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:48.367840Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 23252ee7-7292-4bdf-a5a3-bbf485dd3df7 · outbound

This paper cites Empirical analysis of vul- nerabilities life cycle in golang ecosystem.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Empirical analysis of vul- nerabilities life cycle in golang ecosystem

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.899358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a0c2221a-49a1-4648-954b-52f4a56847bf · outbound

This paper cites Spiderscan: Practical detection of malicious npm packages based on graph-based behav- ior modeling and matching.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Spiderscan: Practical detection of malicious npm packages based on graph-based behav- ior modeling and matching

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.891925Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b84577b2-e441-4d75-b8c3-ebf341f0046d · outbound

This paper cites Mistral 7B.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Mistral 7B

Reference 67

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:48.799910Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99ac1fd1-3682-4873-b282-89ebd9e2d90a · outbound

This paper cites Recommending tags for pull requests in github.Infor- mation and Software Technology, 129:106394, 2021.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Recommending tags for pull requests in github.Infor- mation and Software Technology, 129:106394, 2021

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.884544Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f9f8b1c0-910c-4b05-ae94-1707240fc76e · outbound

This paper cites What is a minimal reproducible example (mre)? https://label.dev/ articles/minimal-reproducible-example/ #what-is-a-mre, 2023.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages What is a minimal reproducible example (mre)? https://label.dev/ articles/minimal-reproducible-example/ #what-is-a-mre, 2023

Reference 69

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.876362Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c97d17b1-988d-4e1b-93f1-d9edd960036e · outbound

This paper cites On the feasibility of cross-language detection of malicious packages in npm and pypi.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On the feasibility of cross-language detection of malicious packages in npm and pypi

Reference 70

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.866291Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0d79e2c1-bcd8-47e9-914a-aa9f505084b0 · outbound

This paper cites Software bots.IEEE Software, 35(1):18–23, 2018.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Software bots.IEEE Software, 35(1):18–23, 2018

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.858780Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7d51859a-e6bd-4052-87fd-a4231d0c2f48 · outbound

This paper cites Patchfinder: A two-phase approach to security patch tracing for disclosed vulnerabilities in open-source software.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Patchfinder: A two-phase approach to security patch tracing for disclosed vulnerabilities in open-source software

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.850125Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f0bbe85f-0557-4483-aed3-54035e470434 · outbound

This paper cites Code of conduct conversations in open source software projects on github.Proc.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Code of conduct conversations in open source software projects on github.Proc

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.841628Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e06c16d6-0eb2-4c89-acdb-eaa7cccaf646 · outbound

This paper cites Demystifying the vulnera- bility propagation and its evolution via dependency trees in the npm ecosystem.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Demystifying the vulnera- bility propagation and its evolution via dependency trees in the npm ecosystem

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.833929Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 00d5e7a0-05a8-4351-bf81-501616a8a79f · outbound

This paper cites RoBERTa: A Robustly Optimized BERT Pretraining Approach.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages RoBERTa: A Robustly Optimized BERT Pretraining Approach

Reference 75

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:50.157302Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b7eccaff-5f25-4755-9252-4c866d9d5fab · outbound

This paper cites Sane github labels.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Sane github labels

Reference 76

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.821601Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation dff7aabe-56ee-4db3-bc4d-f23e25cf128c · outbound

This paper cites an unresolved cited work.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Unresolved cited work

Reference 77

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:33:55.814414Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c7e3e73a-f3ab-4f63-8301-48d0a20d1cef · outbound

This paper cites an unresolved cited work.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Unresolved cited work

Reference 78

Resolution: unresolved; raw_fallback, observed 2026-08-07T05:33:55.806209Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation faad80cd-1a00-4403-aa70-343a0ffe363d · outbound

This paper cites npm: The package manager for javascript.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages npm: The package manager for javascript

Reference 79

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.798691Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d9125eb3-fb17-4511-a584-8d043eef40eb · outbound

This paper cites Backstabber’s knife collection: A review of open source software supply chain attacks.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Backstabber’s knife collection: A review of open source software supply chain attacks

Reference 80

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.790780Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 17a87a0b-e3d5-495f-9e39-aa04bf5e065f · outbound

This paper cites Oliveira, Ana Flávia C.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Oliveira, Ana Flávia C

Reference 81

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.783786Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation cdd9ba92-7bde-4a93-aefe-299705b5631d · outbound

This paper cites Santosa, Asankhaya Sharma, and David Lo.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Santosa, Asankhaya Sharma, and David Lo

Reference 82

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.776196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a98a9f96-fa3d-4196-805e-ae8d359a98af · outbound

This paper cites i just hated it and i want my money back.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages i just hated it and i want my money back

Reference 83

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.768382Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9e1e3d85-7f1e-4793-9422-a412b77cc198 · outbound

This paper cites Minimal bug reports.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Minimal bug reports

Reference 84

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.760687Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6af937e7-7fa2-482b-a994-c779a309d029 · outbound

This paper cites SAGE Publications, London, England, 3rd edition, 2015.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages SAGE Publications, London, England, 3rd edition, 2015

Reference 85

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.753099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 588ff141-1387-4472-9301-c274c6459b79 · outbound

This paper cites Saturation in qualitative research: exploring its conceptualization and opera- tionalization.Quality & quantity, 52:1893–1907, 2018.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Saturation in qualitative research: exploring its conceptualization and opera- tionalization.Quality & quantity, 52:1893–1907, 2018

Reference 86

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.745387Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c01bff76-e723-48dc-898d-54c95bc841cf · outbound

This paper cites Practical automated detection of malicious npm packages.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Practical automated detection of malicious npm packages

Reference 87

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.738232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3ea031ab-3424-4a8b-a60e-5a02030eca5e · outbound

This paper cites Do users change their settings? https://archive.uie.com/brainsparks/2011/ 09/14/do-users-change-their-settings/ , 2011.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Do users change their settings? https://archive.uie.com/brainsparks/2011/ 09/14/do-users-change-their-settings/ , 2011

Reference 88

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.729931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b38c20d4-5aa2-4027-9117-23c5e282310e · outbound

This paper cites Dis- rupting developer productivity one bot at a time.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Dis- rupting developer productivity one bot at a time

Reference 89

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.721036Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b1f857ad-e140-4b99-a733-9574ba3ddf25 · outbound

This paper cites A first look at good first issues on github.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages A first look at good first issues on github

Reference 90

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.713361Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e720257f-9b9f-430d-b952-04f96a80bd09 · outbound

This paper cites Gemma: Open Models Based on Gemini Research and Technology.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Gemma: Open Models Based on Gemini Research and Technology

Reference 91

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:52.218622Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dedc4b02-26ef-44b2-8d95-e91da175f6d8 · outbound

This paper cites LLaMA: Open and Efficient Foundation Language Models.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages LLaMA: Open and Efficient Foundation Language Models

Reference 92

Resolution: unresolved; no resolver link, observed 2026-08-07T05:33:52.352113Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5643c444-6b78-4331-be52-2318dcad98a8 · outbound

This paper cites Github’s dependabot is caus- ing a ton of “spam” in our frontend (angular) reposit.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Github’s dependabot is caus- ing a ton of “spam” in our frontend (angular) reposit

Reference 93

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.706052Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ea3a15eb-7007-4ccc-981c-95f7af098d08 · outbound

This paper cites Honestly dependabot is so bad i’m surprised anything other than the smallest pro.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Honestly dependabot is so bad i’m surprised anything other than the smallest pro

Reference 94

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.698205Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2c009e3e-aa38-4e28-88b5-3598cb55e33f · outbound

This paper cites Mapping user preference to privacy default settings.ACM Trans.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Mapping user preference to privacy default settings.ACM Trans

Reference 95

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.663134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2c14f2fd-cc2c-48c0-ba5d-f79f6840fe0b · outbound

This paper cites Wiese, Ivanilton Polato, Ana Paula Chaves, and Marco A.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Wiese, Ivanilton Polato, Ana Paula Chaves, and Marco A

Reference 97

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.470568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a2ae0995-9f08-4da7-89f6-fc9c417350d4 · outbound

This paper cites The inconve- nient side of software bots on pull requests.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages The inconve- nient side of software bots on pull requests

Reference 98

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:55.217544Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1c82b62f-2b70-4b35-87f0-3ed5b4ec89d2 · outbound

This paper cites Identifying affected libraries and their ecosystems for open source software vulnerabil- ities.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Identifying affected libraries and their ecosystems for open source software vulnerabil- ities

Reference 99

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:54.967096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation fbaaa7e1-7b27-46e5-ba11-95f6e5153dbd · outbound

This paper cites Understanding the threats of up- stream vulnerabilities to downstream projects in the maven ecosystem.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Understanding the threats of up- stream vulnerabilities to downstream projects in the maven ecosystem

Reference 100

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:54.742127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f0466062-d793-4ee7-9141-295d0aad1673 · outbound

This paper cites Maltracker: A fine-grained npm malware tracker copi- loted by llm-enhanced dataset.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages Maltracker: A fine-grained npm malware tracker copi- loted by llm-enhanced dataset

Reference 101

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:54.549834Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0d1e4e24-b3a9-4b56-803a-73d047591815 · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks.Empirical Software Engineering, 27(107), 2022.

"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages On the impact of security vulnerabilities in the npm and rubygems dependency networks.Empirical Software Engineering, 27(107), 2022

Reference 102

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T05:33:54.387180Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Coverage vector

Reference resolution

Outbound references

Pith citing papers