Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web

Ben Swierzy, Marc Ohm, Michael Meier

Reusable software components, typically distributed as packages, are a central paradigm of modern software development. The JavaScript ecosystem serves as a prime example, offering…