{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T22:41:39Z","timestamp":1783636899060,"version":"3.55.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2022,8,1]]},"DOI":"10.1109\/tse.2021.3068901","type":"journal-article","created":{"date-parts":[[2021,3,25]],"date-time":"2021-03-25T20:31:33Z","timestamp":1616704293000},"page":"2695-2708","source":"Crossref","is-referenced-by-count":20,"title":["On the Untriviality of Trivial Packages: An Empirical Study of npm JavaScript Packages"],"prefix":"10.1109","volume":"48","author":[{"given":"Md Atique Reza","family":"Chowdhury","sequence":"first","affiliation":[{"name":"Department of Computer Science and Software Engineering, Data-driven Analysis of Software (DAS) Lab, Concordia University, Montréal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9914-5434","authenticated-orcid":false,"given":"Rabe","family":"Abdalkareem","sequence":"additional","affiliation":[{"name":"Software Analysis and Intelligence Lab (SAIL), School of Computing, Queen's University, Kingston, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emad","family":"Shihab","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Software Engineering, Data-driven Analysis of Software (DAS) Lab, Concordia University, Montréal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7213-4006","authenticated-orcid":false,"given":"Bram","family":"Adams","sequence":"additional","affiliation":[{"name":"Lab on Maintenance, Construction, and Intelligence of Software (MCIS), School of Computing, Queen's University, Kingston, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-4221-6_8"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2900308"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106267"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3347446"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/52.311048"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00067"},{"key":"ref7","first-page":"181","article-title":"On the impact of security vulnerabilities in the npm package dependency network","volume-title":"Proc. IEEE\/ACM 15th Int. Conf. Mining Softw. Repositories","author":"Decan"},{"key":"ref8","first-page":"331","article-title":"Where does this code come from and where does it go?\u2014Integrated code history tracker for open source systems","volume-title":"Proc. 34th Int. Conf. Softw. Eng.","author":"Inoue"},{"key":"ref9","article-title":"A programmer almost broke the internet last week by deleting 11 lines of code - sciencealert.","author":"Macdomald"},{"key":"ref10","article-title":"On the impact of micro-packages: An empirical study of the npm javascript ecosystem","author":"Kula","year":"2017"},{"key":"ref12","article-title":"On the untriviality of trivial packages: An empirical study of npm JavaScript packages","author":"Chowdhury","year":"2019"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2597073.2597126"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2019.8667997"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2597073.2597074"},{"key":"ref20","article-title":"Depcheck - npm.","author":"Li"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.socnet.2004.11.008"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/956750.956782"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03552-4_14"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.12.027"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1328279.1328294"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-018-9639-0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-018-9665-y"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2020.2983399"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070510"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2012.70"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2016.19"},{"key":"ref44","article-title":"Awesome: Awesome lists about all kinds of interesting topics","author":"Sorhus"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1980.11805"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2009.5306356"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/icsm.2000.883030"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2597073.2597131"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2013.39"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.12"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.02.003"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/csmr.2013.33"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21544-5_5"},{"key":"ref54","first-page":"351","article-title":"A look at the dynamics of the javascript package ecosystem","volume-title":"Proc. IEEE\/ACM 13th Work. Conf. Mining Softw. Repositories","author":"Wittern"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2017.28"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.55"},{"key":"ref57","first-page":"995","article-title":"Small world with high risks: A study of security threats in the npm ecosystem","volume-title":"Proc. 28th USENIX Conf. Secur. Symp.","author":"Zimmermann"},{"issue":"1","key":"ref58","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1007\/s10664-017-9521-5","article-title":"Do developers update their library dependencies? - An empirical study on the impact of security advisories on library migration","volume":"23","author":"Kula","year":"2018","journal-title":"Empirical Softw. Eng."},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2019.2918315"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15585-7_17"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.2307\/3033543"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2013.6606621"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9589-y"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3121278"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/9857502\/09387131.pdf?arnumber=9387131","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,30]],"date-time":"2024-08-30T10:40:39Z","timestamp":1725014439000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9387131\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,1]]},"references-count":47,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tse.2021.3068901","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8,1]]}}}