TY - RPRT TI - "I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages AU - Rajdeep Ghosh AU - Shiladitya De AU - Mainack Mondal PY - 2025 UR - https://arxiv.org/abs/2506.07728 ID - 2506.07728 ER -