TY - RPRT TI - Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web AU - Ben Swierzy AU - Marc Ohm AU - Michael Meier PY - 2026 DO - 10.1145/3744916.3787780 UR - https://arxiv.org/abs/2512.15447 ID - 2512.15447 ER -