{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T19:44:19Z","timestamp":1740167059970,"version":"3.37.3"},"reference-count":56,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T00:00:00Z","timestamp":1714953600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T00:00:00Z","timestamp":1714953600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100010663","name":"H2020 European Research Council","doi-asserted-by":"publisher","award":["834540","947735"],"award-info":[{"award-number":["834540","947735"]}],"id":[{"id":"10.13039\/100010663","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EPJ Data Sci."],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>While Free and Open Source (F\/OSS) coding has traditionally been described as a separate commons linked to values of openness and sharing, recent research suggests an increasing integration of private corporations into F\/OSS practices, blurring the boundaries between F\/OSS and commodified coding. However, there is a dearth of empirical, and especially quantitative studies exploring this phenomenon. To address this gap, we model the power dynamics and infrastructural aspects of software production within GitHub, a central hub for F\/OSS development, using a large-scale, directed network. Using various network statistics, we detect the ecosystem\u2019s most impactful actors and find a nuanced picture of the influence of individuals, open source organizations, and private corporations in F\/OSS practices. We find that the majority of public repositories on GitHub depend on a small core of specialized repositories and users. In accordance with expectations, individuals and open source organizations are more prevalent in this core of elite GitHub users, however, we also find a significant amount of private organizations with an indirect, yet consistent influence within GitHub. In addition, we find that directly influential individuals tend to facilitate sponsorship methods more often than indirectly or non-influential individuals. Our research highlights a hybridization of F\/OSS and sheds light on the complex interplay between influence, power, and code production in the multi-language dependency ecosystem of GitHub.<\/jats:p>","DOI":"10.1140\/epjds\/s13688-024-00475-0","type":"journal-article","created":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T13:01:52Z","timestamp":1715000512000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Who makes open source code? The hybridisation of commercial and open source practices"],"prefix":"10.1140","volume":"13","author":[{"given":"Peter","family":"Mehler","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eva Iris","family":"Otto","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0842-7987","authenticated-orcid":false,"given":"Anna","family":"Sapienza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,5,6]]},"reference":[{"key":"475_CR1","doi-asserted-by":"crossref","unstructured":"Barbrook R (1998) The hi-tech gift economy. First monday","DOI":"10.5210\/fm.v3i12.631"},{"issue":"2","key":"475_CR2","doi-asserted-by":"publisher","first-page":"185","DOI":"10.1525\/can.2005.20.2.185","volume":"20","author":"C Kelty","year":"2005","unstructured":"Kelty C (2005) Geeks, social imaginaries, and recursive publics. Cult Anthropol 20(2):185\u2013214","journal-title":"Cult Anthropol"},{"key":"475_CR3","doi-asserted-by":"publisher","DOI":"10.1515\/9781400845293","volume-title":"Coding freedom: the ethics and aesthetics of hacking","author":"EG Coleman","year":"2013","unstructured":"Coleman EG (2013) Coding freedom: the ethics and aesthetics of hacking. Princeton University Press, Princeton"},{"issue":"2","key":"475_CR4","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1080\/09505430220137225","volume":"11","author":"R Barbrook","year":"2002","unstructured":"Barbrook R (2002) The regulation of liberty: free speech, free trade and free gifts on the Net. Sci Cult 11(2):155\u2013170","journal-title":"Sci Cult"},{"key":"475_CR5","unstructured":"xkcd. Dependency; n.d. Available from https:\/\/xkcd.com\/2347\/"},{"key":"475_CR6","unstructured":"The Stack (2023) JavaScript library is EVERYWHERE. Its maintainer is broke. The Stack. Available from https:\/\/www.thestack.technology\/core-js-maintainer-denis-pusharev-license-broke-angry\/"},{"key":"475_CR7","unstructured":"Stokel-Walker C (2014) The Internet Is Being Protected By Two Guys Named Steve. BuzzFeed. Available from https:\/\/www.buzzfeed.com\/chrisstokelwalker\/the-internet-is-being-protected-by-two-guys-named-st"},{"key":"475_CR8","unstructured":"Collins K (2016) How one programmer broke the internet by deleting a tiny piece of code. QUARTZ. Available from https:\/\/qz.com\/646467\/how-one-programmer-broke-the-internet-by-deleting-a-tiny-piece-of-code"},{"key":"475_CR9","doi-asserted-by":"publisher","DOI":"10.16997\/book39","volume-title":"Incorporating the digital commons: corporate involvement in free and open source software","author":"B Birkinbine","year":"2020","unstructured":"Birkinbine B (2020) Incorporating the digital commons: corporate involvement in free and open source software. University of Westminster Press"},{"issue":"1","key":"475_CR10","doi-asserted-by":"publisher","DOI":"10.1177\/2053951719897092","volume":"7","author":"M Fourcade","year":"2020","unstructured":"Fourcade M, Kluttz DN (2020) A Maussian bargain: accumulation by gift in the digital economy. Big Data Soc 7(1):2053951719897092","journal-title":"Big Data Soc"},{"issue":"2","key":"475_CR11","doi-asserted-by":"publisher","first-page":"242","DOI":"10.1080\/17530350.2023.2186916","volume":"16","author":"EI Otto","year":"2023","unstructured":"Otto EI, Salka JH, Blok A (2023) How app companies use GitHub: on modes of valuation in the digital attention economy. J Cult Econ 16(2):242\u2013259","journal-title":"J Cult Econ"},{"issue":"2","key":"475_CR12","doi-asserted-by":"publisher","DOI":"10.1177\/2053951720942543","volume":"7","author":"S Sophus Lai","year":"2020","unstructured":"Sophus Lai S, Flensburg S (2020) A proxy for privacy uncovering the surveillance ecology of mobile apps. Big Data Soc 7(2):2053951720942543","journal-title":"Big Data Soc"},{"issue":"4","key":"475_CR13","volume":"6","author":"T Blanke","year":"2020","unstructured":"Blanke T, Pybus J (2020) The material conditions of platforms: monopolization through decentralization. Soc Media Soc 6(4):2056305120971632","journal-title":"Soc Media Soc"},{"key":"475_CR14","series-title":"CSCW1","first-page":"1","volume-title":"Proceedings of the ACM on human-computer interactio","author":"RS Geiger","year":"2021","unstructured":"Geiger RS, Howard D, Irani L (2021) The labor of maintaining and scaling free and open-source software projects. In: Proceedings of the ACM on human-computer interactio, CSCW1, vol\u00a05. pp\u00a01\u201328"},{"key":"475_CR15","volume-title":"CODE: collaborative ownership and the digital economy","author":"R Ghosh","year":"2006","unstructured":"Ghosh R (2006) CODE: collaborative ownership and the digital economy. MIT Press, Cambridge"},{"issue":"1","key":"475_CR16","doi-asserted-by":"publisher","first-page":"30","DOI":"10.5130\/csr.v20i1.3831","volume":"20","author":"J Parikka","year":"2014","unstructured":"Parikka J (2014) Cultural techniques of cognitive capitalism: metaprogramming and the labour of code. Cult Stud Rev 20(1):30\u201352","journal-title":"Cult Stud Rev"},{"issue":"1","key":"475_CR17","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1080\/17530350.2017.1393443","volume":"11","author":"A Mackenzie","year":"2018","unstructured":"Mackenzie A (2018) 48 million configurations and counting: platform numbers and their capitalization. J Cult Econ 11(1):36\u201353","journal-title":"J Cult Econ"},{"key":"475_CR18","unstructured":"Helles R, \u00d8rmen J, Jensen KB, Lai SS, Menchen-Trevino E, Taneja H et al (2018) A division of labor: the role of big data analysis in the repertoire of internet research methods. AoIR Selected Papers of Internet Research"},{"issue":"5","key":"475_CR19","doi-asserted-by":"publisher","first-page":"692","DOI":"10.1177\/0163443719876533","volume":"42","author":"S Flensburg","year":"2020","unstructured":"Flensburg S, Lai SS (2020) Mapping digital communication systems: infrastructures, markets, and policies as regulatory forces. Media Cult Soc 42(5):692\u2013710","journal-title":"Media Cult Soc"},{"issue":"1","key":"475_CR20","doi-asserted-by":"publisher","first-page":"136","DOI":"10.1177\/20501579211039066","volume":"10","author":"S Flensburg","year":"2022","unstructured":"Flensburg S, Lai SS (2022) Datafied mobile markets: measuring control over apps, data accesses, and third-party services. Mob Media Commun 10(1):136\u2013155","journal-title":"Mob Media Commun"},{"issue":"11","key":"475_CR21","doi-asserted-by":"publisher","first-page":"1957","DOI":"10.1177\/1461444820932868","volume":"22","author":"R Helles","year":"2020","unstructured":"Helles R, Lomborg S, Lai SS (2020) Infrastructures of tracking: mapping the ecology of third-party services across top sites in the EU. New Media Soc 22(11):1957\u20131975","journal-title":"New Media Soc"},{"issue":"2","key":"475_CR22","first-page":"79","volume":"5","author":"S Flensburg","year":"2021","unstructured":"Flensburg S, Lai SS (2021) Networks of power. Analysing the evolution of the Danish Internet infrastructure. Int Hist 5(2):79\u2013100","journal-title":"Int Hist"},{"key":"475_CR23","doi-asserted-by":"publisher","first-page":"298","DOI":"10.1109\/APSEC.2017.36","volume-title":"2017 24th Asia-Pacific software engineering conference (APSEC)","author":"N Lertwittayatrai","year":"2017","unstructured":"Lertwittayatrai N, Kula RG, Onoue S, Hata H, Rungsawang A, Leelaprute P et al. (2017) Extracting insights from the topology of the javascript package ecosystem. In: 2017 24th Asia-Pacific software engineering conference (APSEC). IEEE, New York, pp\u00a0298\u2013307"},{"key":"475_CR24","doi-asserted-by":"publisher","first-page":"351","DOI":"10.1145\/2901739.2901743","volume-title":"Proceedings of the 13th international conference on mining software repositories","author":"E Wittern","year":"2016","unstructured":"Wittern E, Suter P, Rajagopalan S (2016) A look at the dynamics of the JavaScript package ecosystem. In: Proceedings of the 13th international conference on mining software repositories, pp\u00a0351\u2013361"},{"key":"475_CR25","doi-asserted-by":"crossref","unstructured":"Bommarito E, Bommarito MJ II (2021) An empirical analysis of the R package ecosystem. arXiv preprint. arXiv:2102.09904","DOI":"10.2139\/ssrn.3788978"},{"key":"475_CR26","doi-asserted-by":"publisher","first-page":"243","DOI":"10.1109\/CSMR.2013.33","volume-title":"2013 17th European conference on software maintenance and reengineering","author":"DM German","year":"2013","unstructured":"German DM, Adams B, Hassan AE (2013) The evolution of the R software ecosystem. In: 2013 17th European conference on software maintenance and reengineering. IEEE, New York, pp\u00a0243\u2013252"},{"key":"475_CR27","first-page":"1","volume-title":"Proceedings of the 2015 European conference on software architecture workshops","author":"A Serebrenik","year":"2015","unstructured":"Serebrenik A, Mens T (2015) Challenges in software ecosystems research. In: Proceedings of the 2015 European conference on software architecture workshops, pp\u00a01\u20136"},{"key":"475_CR28","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1145\/3377811.3380426","volume-title":"Proceedings of the ACM\/IEEE 42nd international conference on software engineering","author":"Y Wang","year":"2020","unstructured":"Wang Y, Wen M, Liu Y, Wang Y, Li Z, Wang C et al. (2020) Watchman: monitoring dependency conflicts for python library ecosystem. In: Proceedings of the ACM\/IEEE 42nd international conference on software engineering, pp\u00a0125\u2013135"},{"key":"475_CR29","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.111097","volume":"183","author":"J Hejderup","year":"2022","unstructured":"Hejderup J, Gousios G (2022) Can we trust tests to automate dependency updates? A case study of Java projects. J\u00a0Syst Softw 183:111097","journal-title":"J\u00a0Syst Softw"},{"issue":"11","key":"475_CR30","doi-asserted-by":"publisher","first-page":"2457","DOI":"10.1109\/TSE.2019.2952130","volume":"47","author":"FR Cogo","year":"2019","unstructured":"Cogo FR, Oliva GA, Hassan AE (2019) An empirical study of dependency downgrades in the npm ecosystem. IEEE Trans Softw Eng 47(11):2457\u20132470","journal-title":"IEEE Trans Softw Eng"},{"key":"475_CR31","first-page":"1","volume-title":"Proceedings of the 12th international conference on availability, reliability and security","author":"B Pfretzschner","year":"2017","unstructured":"Pfretzschner B, Ben Othmane L (2017) Identification of dependency-based attacks on node. js. In: Proceedings of the 12th international conference on availability, reliability and security, pp\u00a01\u20136"},{"key":"475_CR32","first-page":"361","volume-title":"27th USENIX security symposium (USENIX Security 18)","author":"CA Staicu","year":"2018","unstructured":"Staicu CA, Pradel M (2018) Freezing the Web: a study of {ReDoS} vulnerabilities in {JavaScript-based} web servers. In: 27th USENIX security symposium (USENIX Security 18), pp\u00a0361\u2013376"},{"key":"475_CR33","first-page":"995","volume-title":"28th USENIX security symposium (USENIX Security 19)","author":"M Zimmermann","year":"2019","unstructured":"Zimmermann M, Staicu CA, Tenny C, Pradel M (2019) Small world with high risks: a study of security threats in the npm ecosystem. In: 28th USENIX security symposium (USENIX Security 19), pp\u00a0995\u20131010"},{"key":"475_CR34","doi-asserted-by":"publisher","first-page":"102","DOI":"10.1109\/MSR.2017.55","volume-title":"2017 IEEE\/ACM 14th international conference on mining software repositories (MSR)","author":"R Kikas","year":"2017","unstructured":"Kikas R, Gousios G, Dumas M, Pfahl D (2017) Structure and evolution of package dependency networks. In: 2017 IEEE\/ACM 14th international conference on mining software repositories (MSR). IEEE, New York, pp\u00a0102\u2013112"},{"key":"475_CR35","first-page":"367","volume-title":"Proceedings of the international AAAI conference on web and social media","author":"D Romero","year":"2015","unstructured":"Romero D, Huttenlocher D, Kleinberg J (2015) Coordination and efficiency in decentralized collaboration. In: Proceedings of the international AAAI conference on web and social media, vol\u00a09, pp\u00a0367\u2013376"},{"key":"475_CR36","first-page":"3","volume-title":"International conference on practical applications of agents and multi-agent systems","author":"J Blythe","year":"2019","unstructured":"Blythe J, Bollenbacher J, Huang D, Hui PM, Krohn R, Pacheco D et al. (2019) Massive multi-agent data-driven simulations of the github ecosystem. In: International conference on practical applications of agents and multi-agent systems. Springer, Berlin, pp\u00a03\u201315"},{"key":"475_CR37","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1145\/2666539.2666571","volume-title":"Proceedings of the 1st international workshop on crowd-based software development methods and technologies","author":"Y Yu","year":"2014","unstructured":"Yu Y, Yin G, Wang H, Wang T (2014) Exploring the patterns of social behavior in GitHub. In: Proceedings of the 1st international workshop on crowd-based software development methods and technologies, pp\u00a031\u201336"},{"key":"475_CR38","unstructured":"GitHub. GitHub Webpage; n.d. Available from https:\/\/GitHub.com\/about"},{"key":"475_CR39","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1109\/SANER.2016.12","volume-title":"2016 IEEE 23rd international conference on software analysis, evolution, and reengineering (SANER)","author":"A Decan","year":"2016","unstructured":"Decan A, Mens T, Claes M, When GP (2016) GitHub meets CRAN: an analysis of inter-repository package dependency problems. In: 2016 IEEE 23rd international conference on software analysis, evolution, and reengineering (SANER), vol\u00a01. IEEE, New York, pp\u00a0493\u2013504"},{"key":"475_CR40","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1109\/TSA.2016.23","volume-title":"2016 third international conference on trustworthy systems and their applications (TSA)","author":"W Ma","year":"2016","unstructured":"Ma W, Chen L, Zhou Y, Xu B (2016) What are the dominant projects in the github python ecosystem? In: 2016 third international conference on trustworthy systems and their applications (TSA). IEEE, New York, pp\u00a087\u201395"},{"key":"475_CR41","doi-asserted-by":"publisher","first-page":"174","DOI":"10.1016\/j.infsof.2019.03.005","volume":"110","author":"K Blincoe","year":"2019","unstructured":"Blincoe K, Harrison F, Kaur N, Damian D (2019) Reference coupling: an exploration of inter-project technical dependencies and their characteristics within large software ecosystems. Inf Softw Technol 110:174\u2013189","journal-title":"Inf Softw Technol"},{"key":"475_CR42","doi-asserted-by":"publisher","first-page":"202","DOI":"10.1109\/MSR.2015.26","volume-title":"2015 IEEE\/ACM 12th working conference on mining software repositories","author":"K Blincoe","year":"2015","unstructured":"Blincoe K, Harrison F, Damian D (2015) Ecosystems in GitHub and a method for ecosystem identification using reference coupling. In: 2015 IEEE\/ACM 12th working conference on mining software repositories. IEEE, New York, pp\u00a0202\u2013211"},{"key":"475_CR43","unstructured":"GitHub. About The Dependency Graph; n.d. Available from https:\/\/docs.github.com\/en\/code-security\/supply-chain-security\/understanding-your-software-supply-chain\/about-the-dependency-graph"},{"key":"475_CR44","unstructured":"GitHub. GitHub Dependabot; n.d. Available from https:\/\/GitHub.com\/dependabot"},{"key":"475_CR45","unstructured":"GitHub. GitHub GraphQL; n.d. Available from https:\/\/docs.GitHub.com\/en\/graphql"},{"key":"475_CR46","unstructured":"GH Archive; n.d. Available from https:\/\/www.gharchive.org\/"},{"key":"475_CR47","unstructured":"GitHub. GitHub REST API documentation; 2022. Available from https:\/\/docs.github.com\/en\/rest?apiVersion=2022-11-28"},{"key":"475_CR48","unstructured":"de Paula Peixoto T (2018) Graph-tool documentation. Available from https:\/\/graph-tool.skewed.de\/"},{"key":"475_CR49","unstructured":"core team I (2022). igraph\u2014The Netwotk Analysis Package. Available from https:\/\/igraph.org\/"},{"issue":"1\u20136","key":"475_CR50","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1016\/S1389-1286(00)00083-9","volume":"33","author":"A Broder","year":"2000","unstructured":"Broder A, Kumar R, Maghoul F, Raghavan P, Rajagopalan S, Stata R et al. (2000) Graph structure in the web. Comput Netw 33(1\u20136):309\u2013320","journal-title":"Comput Netw"},{"issue":"1","key":"475_CR51","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-019-41695-z","volume":"9","author":"VA Traag","year":"2019","unstructured":"Traag VA, Waltman L, Van Eck NJ (2019) From Louvain to Leiden: guaranteeing well-connected communities. Sci Rep 9(1):5233","journal-title":"Sci Rep"},{"issue":"2","key":"475_CR52","doi-asserted-by":"publisher","first-page":"191","DOI":"10.7155\/jgaa.00124","volume":"10","author":"P Pons","year":"2006","unstructured":"Pons P, Latapy M (2006) Computing communities in large networks using random walks. J Graph Algorithms Appl 10(2):191\u2013218","journal-title":"J Graph Algorithms Appl"},{"issue":"1","key":"475_CR53","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1140\/epjst\/e2010-01179-1","volume":"178","author":"M Rosvall","year":"2009","unstructured":"Rosvall M, Axelsson D, Bergstrom CT (2009) The map equation. Eur Phys J Spec Top 178(1):13\u201323","journal-title":"Eur Phys J Spec Top"},{"key":"475_CR54","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.physrep.2016.09.002","volume":"659","author":"S Fortunato","year":"2016","unstructured":"Fortunato S, Hric D (2016) Community detection in networks: a user guide. Phys Rep 659:1\u201344","journal-title":"Phys Rep"},{"issue":"8","key":"475_CR55","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0011976","volume":"5","author":"A Lancichinetti","year":"2010","unstructured":"Lancichinetti A, Kivel\u00e4 M, Saram\u00e4ki J, Fortunato S (2010) Characterizing the community structure of complex networks. PLoS ONE 5(8):e11976","journal-title":"PLoS ONE"},{"issue":"7321","key":"475_CR56","doi-asserted-by":"publisher","first-page":"1103","DOI":"10.1136\/bmj.323.7321.1103","volume":"323","author":"G Eysenbach","year":"2001","unstructured":"Eysenbach G, Till JE (2001) Ethical issues in qualitative research on Internet communities. BMJ 323(7321):1103\u20131105","journal-title":"BMJ"}],"container-title":["EPJ Data Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1140\/epjds\/s13688-024-00475-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1140\/epjds\/s13688-024-00475-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1140\/epjds\/s13688-024-00475-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,6]],"date-time":"2024-05-06T13:02:33Z","timestamp":1715000553000},"score":1,"resource":{"primary":{"URL":"https:\/\/epjdatascience.springeropen.com\/articles\/10.1140\/epjds\/s13688-024-00475-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,6]]},"references-count":56,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["475"],"URL":"https:\/\/doi.org\/10.1140\/epjds\/s13688-024-00475-0","relation":{},"ISSN":["2193-1127"],"issn-type":[{"type":"electronic","value":"2193-1127"}],"subject":[],"published":{"date-parts":[[2024,5,6]]},"assertion":[{"value":"19 December 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 April 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 May 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The data collection process was approved by the European Research Council as part of running reviews of the overall project of which this research forms part.Following the minimization principle of the General Data Protection Regulation (GDPR), we only collected data related to dependencies and metadata needed for the study on public repositories and users.Based on the size of GitHub, and the wide recognition of such public repositories as part of a public online forum, it is reasonable to assume that users do not consider GitHub as a private space, which would require a different ethical consideration\u00a0[]. However, we do identify particular owners, and also manually annotate their information. As a number of these owners are individuals, we consider our data as personal data according to GDPR. As such, we have followed the requirements concerning personal data collection and storage.Because of size of the data-set and the nature of the data, it was impossible to inform data subjects of the study directly. Instead, we mitigate this by publishing the data processing on the research project website, in accordance with GDPR protocols.Further parts of this evaluation rest on the basis that the data processing was evaluated as non-intrusive, and we also anonymize names of individual repository owners that we refer to in the paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"The authors declare that they have no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"35"}}