TOSEM · 2023
On the Discoverability of npm Vulnerabilities in Node.js Projects
Mahmoud Alfadel*, Diego Elias Costa, Emad Shihab, Bram Adams
ACM Transactions on Software Engineering and Methodology
Abstract
We study the discoverability of npm vulnerabilities in Node.js projects, examining how vulnerabilities are discovered and reported in the npm ecosystem.
security vulnerabilitiessoftware ecosystems