{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T13:48:04Z","timestamp":1770817684895,"version":"3.50.1"},"reference-count":59,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,11,4]],"date-time":"2025-11-04T00:00:00Z","timestamp":1762214400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,11,4]],"date-time":"2025-11-04T00:00:00Z","timestamp":1762214400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Karlsruher Institut f\u00fcr Technologie (KIT)"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2026,1]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Data protection regulations such as the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA) in the US affect how software may handle the personal data of its users. Prior literature focused on how data protection regulations are discussed for software in operation, or how this topic is discussed in various channels outside of the software development process. Yet, what is missing, is a perspective on the impact of such regulations on the software development process. In our work, we address this gap, and explore how discussions during the development of software are impacted by regulations, who reports and discusses issues related to personal data and data protection, and how developers react to those issues. To that end, we used inductive coding to analyze 652 issues from Open Source GitHub projects and used the codes to quantitatively analyze the relation between the roles, resolutions, and data protection issues to understand correlations and predict resolutions of issues. Most notably we observed a significant increase in reporting when GDPR came into effect. The most common issue types were feature requests for privacy enhancement, which were mainly reported and discussed by frequent reporters and frequent committers. But especially issues regarding privacy enhancement were also frequently reported by one-time reporters. Most of the requests were solved without opposing votes. All in all, our findings indicate that data protection regulations effectively start discussions about privacy within the software development community.<\/jats:p>","DOI":"10.1007\/s10664-025-10742-x","type":"journal-article","created":{"date-parts":[[2025,11,4]],"date-time":"2025-11-04T01:16:37Z","timestamp":1762218997000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["The whos, whats, and whys of issues related to personal data and data protection in open-source projects on GitHub"],"prefix":"10.1007","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6964-589X","authenticated-orcid":false,"given":"Anne","family":"Hennig","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9336-2075","authenticated-orcid":false,"given":"Lukas","family":"Schulte","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9765-2803","authenticated-orcid":false,"given":"Steffen","family":"Herbold","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4218-1658","authenticated-orcid":false,"given":"Oksana","family":"Kulyk","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6267-4874","authenticated-orcid":false,"given":"Peter","family":"Mayer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,11,4]]},"reference":[{"issue":"2","key":"10742_CR1","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1109\/MS.2017.31","volume":"34","author":"R Abdalkareem","year":"2017","unstructured":"Abdalkareem R, Shihab E, Rilling J (2017) What do developers use the crowd for? a study using stack overflow. IEEE Softw 34(2):53\u201360. https:\/\/doi.org\/10.1109\/MS.2017.31","journal-title":"IEEE Softw"},{"key":"10742_CR2","unstructured":"Andow B, Mahmud SY, Whitaker J, Enck W, Reaves B, Singh K, Egelman S (2020) Actions speak louder than words: entity-sensitive privacy policy and data flow analysis with policheck. In: Proceedings of the 29th USENIX conference on security symposium, USENIX Association, USA, SEC\u201920"},{"key":"10742_CR3","doi-asserted-by":"publisher","unstructured":"Balebako R, Marsh A, Lin J, Hong J, Cranor LF (2014) The privacy and security behaviors of smartphone app developers. Proceedings of the 2014 workshop on usable security (USEC). https:\/\/doi.org\/10.14722\/usec.2014.23006","DOI":"10.14722\/usec.2014.23006"},{"issue":"3","key":"10742_CR4","doi-asserted-by":"publisher","first-page":"619","DOI":"10.1007\/s10664-012-9231-y","volume":"19","author":"A Barua","year":"2014","unstructured":"Barua A, Thomas SW, Hassan AE (2014) What are developers talking about? an analysis of topics and trends in stack overflow. Empir Softw Eng 19(3):619\u2013654. https:\/\/doi.org\/10.1007\/s10664-012-9231-y","journal-title":"Empir Softw Eng"},{"key":"10742_CR5","doi-asserted-by":"publisher","first-page":"103163","DOI":"10.1016\/j.jisa.2022.103163","volume":"66","author":"R Belen Saglam","year":"2022","unstructured":"Belen Saglam R, Nurse JR, Hodges D (2022) Personal information: perceptions, types and evolution. J Inf Secur Appl 66:103163. https:\/\/doi.org\/10.1016\/j.jisa.2022.103163","journal-title":"J Inf Secur Appl"},{"key":"10742_CR6","doi-asserted-by":"publisher","unstructured":"Bissyand\u00e9 TF, Lo D, Jiang L, R\u00e9veill\u00e8re L, Klein J, Traon YL (2013) Got issues? who cares about it? a large scale investigation of issue trackers from Github. 2013 IEEE 24th International Symposium on Software Reliability Engineering (ISSRE). pp 188\u2013197 https:\/\/doi.org\/10.1109\/issre.2013.6698918","DOI":"10.1109\/issre.2013.6698918"},{"key":"10742_CR7","unstructured":"Bollinger D, Kubicek K, Cotrini C, Basin D (2022) Automating cookie consent and GDPR violation detection. In: 31st USENIX security symposium (USENIX Security 22), USENIX Association, Boston, MA, pp 2893\u20132910. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/bollinger"},{"issue":"1","key":"10742_CR8","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman L (2001) Random forests. Mach Learn 45(1):5\u201332. https:\/\/doi.org\/10.1023\/A:1010933404324","journal-title":"Mach Learn"},{"key":"10742_CR9","volume-title":"Classification and regression trees","author":"L Breiman","year":"1984","unstructured":"Breiman L, Friedman J, Olshen R, Stone C (1984) Classification and regression trees. Wadsworth and Brooks, Monterey, CA"},{"issue":"4","key":"10742_CR10","doi-asserted-by":"publisher","first-page":"122","DOI":"10.21315\/mjms2018.25.4.12","volume":"25","author":"MA Bujang","year":"2018","unstructured":"Bujang MA, Sa\u2019at N, Sidik TMITAB, Joo LC (2018) Sample size guidelines for logistic regression from observational studies with large population: emphasis on the accuracy between statistics and parameters based on real life clinical data. Malays J Med Sci 25(4):122\u2013130. https:\/\/doi.org\/10.21315\/mjms2018.25.4.12","journal-title":"Malays J Med Sci"},{"key":"10742_CR11","doi-asserted-by":"publisher","unstructured":"Chitkara S, Gothoskar N, Harish S, Hong JI, Agarwal Y (2017) Does this app really need my location? context-aware privacy management for smartphones. Proc ACM Interact Mob Wearable Ubiquitous Technol 1(3). https:\/\/doi.org\/10.1145\/3132029","DOI":"10.1145\/3132029"},{"key":"10742_CR12","unstructured":"Cook TD, Campbell DT, Day A (1979) Quasi-experimentation: design & analysis issues for field settings, vol 351. Houghton Mifflin Boston"},{"key":"10742_CR13","doi-asserted-by":"crossref","unstructured":"Elder GH, Pavalko EK, Clipp EC (1993) Working with archival data: Studying lives, vol 88. Sage","DOI":"10.4135\/9781412986519"},{"key":"10742_CR14","unstructured":"EuGH (2019) Urteil vom 01.10.2019 - c-673\/17. https:\/\/openjur.de\/u\/2180608.html"},{"key":"10742_CR15","unstructured":"European Union (2002) Directive 2002\/58\/ec of the european parliament and of the council"},{"key":"#cr-split#-10742_CR16.1","unstructured":"European Union (2016) Regulation"},{"key":"#cr-split#-10742_CR16.2","unstructured":"(EU) 2016\/ 679 of the European parliament and of the council - of 27 April 2016 - on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95\/ 46\/ EC (general data protection regulation. https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"issue":"1","key":"10742_CR17","first-page":"3133","volume":"15","author":"M Fern\u00e1ndez-Delgado","year":"2014","unstructured":"Fern\u00e1ndez-Delgado M, Cernadas E, Barro S, Amorim D (2014) Do we need hundreds of classifiers to solve real world classification problems? J Mach Learn Res 15(1):3133\u20133181","journal-title":"J Mach Learn Res"},{"key":"10742_CR18","doi-asserted-by":"publisher","unstructured":"Ferreira I, Adams B, Cheng J (2022) How heated is it? understanding Github locked issues. In: 2022 IEEE\/ACM 19th International Conference on Mining Software Repositories (MSR), IEEE Computer Society, Los Alamitos, CA, USA, pp 309\u2013320, https:\/\/doi.org\/10.1145\/3524842.3527957","DOI":"10.1145\/3524842.3527957"},{"issue":"4","key":"10742_CR19","doi-asserted-by":"publisher","first-page":"1640","DOI":"10.1177\/1461444817702397","volume":"20","author":"D Greene","year":"2018","unstructured":"Greene D, Shilton K (2018) Platform privacies: governance, collaboration, and the different meanings of \u201cprivacy\u2019\u2019 in iOS and android development. New Media Soc 20(4):1640\u20131657. https:\/\/doi.org\/10.1177\/1461444817702397","journal-title":"New Media Soc"},{"key":"10742_CR20","doi-asserted-by":"publisher","unstructured":"Habib H, Pearman S, Wang J, Zou Y, Acquisti A, Cranor LF, Sadeh N, Schaub F (2020) \u201cit\u2019s a scavenger hunt\u201d: Usability of websites\u2019 opt-out and data deletion choices. In: Proceedings of the 2020 CHI conference on human factors in computing systems, Association for Computing Machinery, New York, NY, USA, CHI \u201920, p 1\u201312. https:\/\/doi.org\/10.1145\/3313831.3376511","DOI":"10.1145\/3313831.3376511"},{"issue":"1","key":"10742_CR21","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/s10664-017-9517-1","volume":"23","author":"I Hadar","year":"2018","unstructured":"Hadar I, Hasson T, Ayalon O, Toch E, Birnhack M, Sherman S, Balissa A (2018) Privacy by designers: software developers\u2019 privacy mindset. Empir Softw Eng 23(1):259\u2013289. https:\/\/doi.org\/10.1007\/s10664-017-9517-1","journal-title":"Empir Softw Eng"},{"issue":"4","key":"10742_CR22","doi-asserted-by":"publisher","first-page":"2694","DOI":"10.1007\/s10664-020-09819-6","volume":"25","author":"J Han","year":"2020","unstructured":"Han J, Shihab E, Wan Z, Deng S, Xia X (2020) What do programmers discuss about deep learning frameworks. Empir Softw Eng 25(4):2694\u20132747. https:\/\/doi.org\/10.1007\/s10664-020-09819-6","journal-title":"Empir Softw Eng"},{"key":"10742_CR23","unstructured":"Hennig A, Schulte L, Herbold S, Kulyk O, Mayer P (2023) Understanding issues related to personal data and data protection in open source projects on Github. arXiv:2304.06367"},{"key":"10742_CR24","doi-asserted-by":"publisher","first-page":"110802","DOI":"10.1016\/j.jss.2020.110802","volume":"171","author":"S Herbold","year":"2021","unstructured":"Herbold S, Amirfallah A, Trautsch F, Grabowski J (2021) A systematic mapping study of developer social network research. J Syst Softw 171:110802. https:\/\/doi.org\/10.1016\/j.jss.2020.110802","journal-title":"J Syst Softw"},{"key":"10742_CR25","doi-asserted-by":"publisher","unstructured":"Herbold S, Trautsch A, Trautsch F, Ledel B (2022) Problems with SZZ and features: an empirical study of the state of practice of defect prediction data collection. Empir Softw Eng 27(2). https:\/\/doi.org\/10.1007\/s10664-021-10092-4","DOI":"10.1007\/s10664-021-10092-4"},{"key":"10742_CR26","doi-asserted-by":"publisher","unstructured":"Honsel V, Herbold S, Grabowski J (2016) Hidden Markov models for the prediction of developer involvement dynamics and workload. In: Proceedings of the The 12th international conference on predictive models and data analytics in software engineering, Association for Computing Machinery, New York, NY, USA, PROMISE 2016. https:\/\/doi.org\/10.1145\/2972958.2972960","DOI":"10.1145\/2972958.2972960"},{"key":"10742_CR27","doi-asserted-by":"publisher","unstructured":"Iwaya LH, Babar MA, Rashid A (2022) Privacy engineering in the wild: Understanding the practitioners\u2019 mindset, organisational culture, and current practices. https:\/\/doi.org\/10.48550\/ARXIV.2211.08916","DOI":"10.48550\/ARXIV.2211.08916"},{"key":"10742_CR28","doi-asserted-by":"crossref","unstructured":"Joblin M, Apel S, Hunsen C, Mauerer W (2017) Classifying developers into core and peripheral: an empirical study on count and network metrics. In: 2017 IEEE\/ACM 39th International Conference on Software Engineering (ICSE). IEEE, pp 164\u2013174","DOI":"10.1109\/ICSE.2017.23"},{"issue":"5","key":"10742_CR29","doi-asserted-by":"publisher","first-page":"2035","DOI":"10.1007\/s10664-015-9393-5","volume":"21","author":"E Kalliamvakou","year":"2015","unstructured":"Kalliamvakou E, Gousios G, Blincoe K, Singer L, German DM, Damian D (2015) An in-depth study of the promises and perils of mining Github. Empir Softw Eng 21(5):2035\u20132071. https:\/\/doi.org\/10.1007\/s10664-015-9393-5","journal-title":"Empir Softw Eng"},{"key":"10742_CR30","doi-asserted-by":"publisher","unstructured":"Kallis R, Chaparro O, Di\u00a0Sorbo A, Panichella S (2022) Nlbse\u201922 tool competition. In: 2022 IEEE\/ACM 1st International Workshop on Natural Language-Based Software Engineering (NLBSE). pp 25\u201328. https:\/\/doi.org\/10.1145\/3528588.3528664","DOI":"10.1145\/3528588.3528664"},{"key":"10742_CR31","doi-asserted-by":"crossref","unstructured":"Kampanos G, Shahandashti SF (2021) Accept all: the landscape of cookie banners in Greece and the UK. In: J\u00f8sang A, Futcher L, Hagen J (eds) ICT systems security and privacy protection. Springer International Publishing, Cham, pp 213\u2013227","DOI":"10.1007\/978-3-030-78120-0_14"},{"key":"10742_CR32","doi-asserted-by":"publisher","unstructured":"Kekulluoglu D, Acar Y (2023) \u201cwe are a startup to the core\u201d: a qualitative interview study on the security and privacy development practices in Turkish software startups. In: 2023 2023 IEEE symposium on security and privacy (SP) (SP), IEEE Computer Society, Los Alamitos, CA, USA, pp 1331\u20131347. https:\/\/doi.org\/10.1109\/SP46215.2023.00076","DOI":"10.1109\/SP46215.2023.00076"},{"key":"10742_CR33","doi-asserted-by":"publisher","unstructured":"Khalajzadeh H, Shahin M, Obie HO, Grundy J (2022) How are diverse end-user human-centric issues discussed on Github? In: 2022 IEEE\/ACM 44th International Conference on Software Engineering: Software Engineering in Society (ICSE-SEIS), pp 79\u201389. https:\/\/doi.org\/10.1145\/3510458.3513014","DOI":"10.1145\/3510458.3513014"},{"key":"10742_CR34","doi-asserted-by":"publisher","first-page":"101656","DOI":"10.1016\/j.pmcj.2022.101656","volume":"85","author":"P K\u00fchtreiber","year":"2022","unstructured":"K\u00fchtreiber P, Pak V, Reinhardt D (2022) A survey on solutions to support developers in privacy-preserving IoT development. Pervasive Mob Comput 85:101656. https:\/\/doi.org\/10.1016\/j.pmcj.2022.101656","journal-title":"Pervasive Mob Comput"},{"key":"10742_CR35","doi-asserted-by":"publisher","unstructured":"Li T, Agarwal Y, Hong JI (2018) Coconut: An IDE plugin for developing privacy-friendly apps. Proc ACM Interact Mob Wearable Ubiquitous Technol 2(4). https:\/\/doi.org\/10.1145\/3287056","DOI":"10.1145\/3287056"},{"issue":"CSCW3","key":"10742_CR36","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3432919","volume":"4","author":"T Li","year":"2021","unstructured":"Li T, Louie E, Dabbish L, Hong JI (2021) How developers talk about personal data and what it means for user privacy. Proc ACM on Human-Comput Interact 4(CSCW3):1\u201328. https:\/\/doi.org\/10.1145\/3432919","journal-title":"Proc ACM on Human-Comput Interact"},{"key":"10742_CR37","doi-asserted-by":"publisher","unstructured":"Matte C, Bielova N, Santos C (2020) Do cookie banners respect my choice?: Measuring legal compliance of banners from IAB Europe\u2019s transparency and consent framework. In: 2020 IEEE Symposium on Security and Privacy (SP). pp 791\u2013809. https:\/\/doi.org\/10.1109\/SP40000.2020.00076","DOI":"10.1109\/SP40000.2020.00076"},{"key":"10742_CR38","unstructured":"Mayer P, Zou Y, Schaub F, Aviv AJ (2021) \u201cNow i\u2019m a bit angry:\u201d individuals\u2019 awareness, perception, and responses to data breaches that affected them. In: Proceedings of the 30th USENIX security symposium, USENIX Association, USENIX Security Symposium, pp 393\u2013410. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/mayer"},{"key":"10742_CR39","unstructured":"McFadden D (1974) Conditional logit analysis of qualitative choice behavior. Frontiers in Econometrics pp 105\u2013142"},{"key":"10742_CR40","unstructured":"Pearman S, Zhang SA, Bauer L, Christin N, Cranor LF (2019) Why people (don\u2019t) use password managers effectively. In: Symposium on usable privacy and security, symposium on usable privacy and security, pp 319\u2013338. https:\/\/www.usenix.org\/conference\/soups2019\/presentation\/pearman"},{"key":"10742_CR41","doi-asserted-by":"publisher","unstructured":"Peixoto M, Ferreira D, Cavalcanti M, Silva C, Vilela J, Ara\u00fajo J, Gorschek T (2023) The perspective of Brazilian software developers on data privacy. J Syst Softw 195:111523. https:\/\/doi.org\/10.1016\/j.jss.2022.111523, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0164121222001996","DOI":"10.1016\/j.jss.2022.111523"},{"key":"10742_CR42","doi-asserted-by":"publisher","unstructured":"Pletea D, Vasilescu B, Serebrenik A (2014) Security and emotion: sentiment analysis of security discussions on Github. In: Proceedings of the 11th working conference on mining software repositories. Association for Computing Machinery, New York, NY, USA, MSR 2014, pp 348\u2013351, https:\/\/doi.org\/10.1145\/2597073.2597117","DOI":"10.1145\/2597073.2597117"},{"issue":"1","key":"10742_CR43","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1023\/b:amai.0000018580.96245.c6","volume":"41","author":"LE Raileanu","year":"2004","unstructured":"Raileanu LE, Stoffel K (2004) Theoretical comparison between the Gini index and information gain criteria. Ann Math Artif Intell 41(1):77\u201393. https:\/\/doi.org\/10.1023\/b:amai.0000018580.96245.c6","journal-title":"Ann Math Artif Intell"},{"key":"10742_CR44","doi-asserted-by":"publisher","unstructured":"Rao N, Tsay J, Hirzel M, Hellendoorn VJ (2022) Comments on comments: Where code review and documentation meet. In: 2022 IEEE\/ACM 19th International Conference on Mining Software Repositories (MSR), IEEE Computer Society, Los Alamitos, CA, USA, pp 18\u201322. https:\/\/doi.org\/10.1145\/3524842.3528475","DOI":"10.1145\/3524842.3528475"},{"key":"10742_CR45","unstructured":"Regional Court of Bucharest, Romania (2019) Judgment of the court in case c-61\/19"},{"issue":"2","key":"10742_CR46","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1007\/s10664-008-9102-8","volume":"14","author":"P Runeson","year":"2009","unstructured":"Runeson P, H\u00f6st M (2009) Guidelines for conducting and reporting case study research in software engineering. Empir Softw Eng 14(2):131\u2013164","journal-title":"Empir Softw Eng"},{"key":"10742_CR47","doi-asserted-by":"publisher","first-page":"105932","DOI":"10.1016\/j.clsr.2023.105932","volume":"52","author":"V Rupp","year":"2024","unstructured":"Rupp V, Grafenstein M (2024) Clarifying \u201cpersonal data\u2019\u2019 and the role of anonymisation in data protection law: including and excluding data from the scope of the GDPR (more clearly) through refining the concept of data protection. Comput Law Secur Rev 52:105932. https:\/\/doi.org\/10.1016\/j.clsr.2023.105932","journal-title":"Comput Law Secur Rev"},{"key":"10742_CR48","doi-asserted-by":"publisher","unstructured":"Senarath A, Arachchilage NAG (2018) Why developers cannot embed privacy into software systems? an empirical investigation. In: Proceedings of the 22nd international conference on evaluation and assessment in software engineering 2018. Association for Computing Machinery, New York, NY, USA, EASE\u201918, pp 211\u2013216. https:\/\/doi.org\/10.1145\/3210459.3210484","DOI":"10.1145\/3210459.3210484"},{"key":"10742_CR49","doi-asserted-by":"publisher","unstructured":"Sheth S, Kaiser G, Maalej W (2014) Us and them: a study of privacy requirements across North America, Asia, and Europe. In: Proceedings of the 36th international conference on software engineering. Association for Computing Machinery, New York, NY, USA, ICSE 2014, pp 859\u2013870. https:\/\/doi.org\/10.1145\/2568225.2568244","DOI":"10.1145\/2568225.2568244"},{"key":"10742_CR50","unstructured":"State of California Department of Justice (2023) California Consumer Privacy Act (CCPA). https:\/\/www.oag.ca.gov\/privacy\/ccpa"},{"key":"10742_CR51","doi-asserted-by":"publisher","unstructured":"Tahaei M, Vaniea K, Saphra N (2020) Understanding privacy-related questions on stack overflow. In: Proceedings of the 2020 CHI conference on human factors in computing systems. Association for Computing Machinery, New York, NY, USA, CHI \u201920, pp 1\u201314. https:\/\/doi.org\/10.1145\/3313831.3376768","DOI":"10.1145\/3313831.3376768"},{"issue":"2","key":"10742_CR52","doi-asserted-by":"publisher","first-page":"237","DOI":"10.1177\/1098214005283748","volume":"27","author":"DR Thomas","year":"2006","unstructured":"Thomas DR (2006) A general inductive approach for analyzing qualitative evaluation data. Am J Eval 27(2):237\u2013246. https:\/\/doi.org\/10.1177\/1098214005283748","journal-title":"Am J Eval"},{"key":"10742_CR53","doi-asserted-by":"publisher","first-page":"126","DOI":"10.2478\/popets-2019-0023","volume":"2","author":"M Trevisan","year":"2019","unstructured":"Trevisan M, Traverso S, Bassi E, Mellia M (2019) 4 years of EU cookie law: results and lessons learned. Proc Priv Enhancing Technol 2:126\u2013145. https:\/\/doi.org\/10.2478\/popets-2019-0023","journal-title":"Proc Priv Enhancing Technol"},{"key":"10742_CR54","doi-asserted-by":"publisher","unstructured":"Tunkel S, Herbold S (2022) Exploring the relationship between performance metrics and cost saving potential of defect prediction models. Empir Softw Eng 27(7). https:\/\/doi.org\/10.1007\/s10664-022-10224-4","DOI":"10.1007\/s10664-022-10224-4"},{"key":"10742_CR55","doi-asserted-by":"publisher","unstructured":"Vasilescu B, Filkov V, Serebrenik A (2013) Stackoverflow and Github: Associations between software development and crowdsourced knowledge. 2013 international conference on social computing, pp 188\u2013195. https:\/\/doi.org\/10.1109\/socialcom.2013.35","DOI":"10.1109\/socialcom.2013.35"},{"key":"10742_CR56","doi-asserted-by":"crossref","unstructured":"Wohlin C, Runeson P, H\u00f6st M, Ohlsson MC, Regnell B, Wesslen A (2012) Experimentation in software engineering. Springer Publishing Company, Incorporated","DOI":"10.1007\/978-3-642-29044-2"},{"issue":"2","key":"10742_CR57","doi-asserted-by":"publisher","first-page":"637","DOI":"10.1007\/s10664-018-9634-5","volume":"24","author":"Y Wu","year":"2019","unstructured":"Wu Y, Wang S, Bezemer CP, Inoue K (2019) How do developers utilize source code from stack overflow? Empir Softw Eng 24(2):637\u2013673. https:\/\/doi.org\/10.1007\/s10664-018-9634-5","journal-title":"Empir Softw Eng"},{"issue":"1","key":"10742_CR58","doi-asserted-by":"publisher","first-page":"250","DOI":"10.1109\/TR.2021.3074512","volume":"71","author":"X Xie","year":"2021","unstructured":"Xie X, Su Y, Chen S, Chen L, Xuan J, Xu B (2021) MULA: a just-in-time multi-labeling system for issue reports. IEEE Trans Reliab 71(1):250\u2013263","journal-title":"IEEE Trans Reliab"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10742-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-025-10742-x","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10742-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T11:25:43Z","timestamp":1770809143000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-025-10742-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,4]]},"references-count":59,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2026,1]]}},"alternative-id":["10742"],"URL":"https:\/\/doi.org\/10.1007\/s10664-025-10742-x","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,4]]},"assertion":[{"value":"1 March 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 September 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 November 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed Consent"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Clinical Trial Number"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}}],"article-number":"9"}}