Supplementary Material for Understanding the Response to Open-Source Dependency Abandonment in the npm Ecosystem

This replication package contains the data and scripts necesary to replicate all visualizations and models included in the paper Understanding the Response to Open-Source Dependency Abandonment in the npm Ecosystem (ICSE 2025).

• explorationAndModeling.Rmd - R markdown script containing replication code for all visualizations and models present in paper. Output of all visualization in script are stored in the `visualizations` folder
• README.md - Overview of all files found in the replication package and their details 
• All datasets used by the script can be found in the `data` folder:
  • widelyUsedPackages.csv - Dataset containing the 28,100 widely-used npm packages identified (See Sec. IV of paper for more details).
  • abandonmentExposedDependentsData.csv - Dataset containing the 2,288 projects we identified as being directly exposed to dependency abandonment (See Sec. IV) and the additional data collected for each project for modeling (See Sec. VI of paper for more details).
  • updateExposedDependentsData.csv - Dataset containing the 11,925 dependent projects identified in RQ2b, note this dataset includes the subset of dependents who used floating declarations to automatically update which we exclude from our primary analysis but include here for comparitive explorations (See Sec. V of paper for more details).
  • vulnerabilityExposedDependentsData.csv - Dataset containing the 13,190 dependent projects identified in RQ2c, note this dataset includes the subset of dependents who used floating declarations to automatically update which we exclude from our primary analysis but include here for comparitive explorations (See Sec. V of paper for more details).