@misc{indiciae59e3c9073875, title = {Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web}, author = {Ben Swierzy and Marc Ohm and Michael Meier}, year = {2026}, doi = {10.1145/3744916.3787780}, url = {https://arxiv.org/abs/2512.15447}, note = {Source identifier: 2512.15447} }