JSS · 2023
Empirical Analysis of Security-Related Code Reviews in npm Packages
Mahmoud Alfadel*, Nicholas Alexandre Nagy, Diego Elias Costa, Rabe Abdalkareem, Emad Shihab
Journal of Systems and Software
Abstract
We conduct an empirical analysis of security-related code reviews in npm packages, examining how security concerns are identified and addressed during the code review process.
security vulnerabilitiescode review