@misc{indiciae4a8473f7f66f, title = {Understanding npm Developers' Practices, Challenges, and Recommendations for Secure Package Development}, author = {Anthony Peruma and Truman Choy and Gerald Lee and Italo De Oliveira Santos}, year = {2026}, doi = {10.1145/3794860.3794908}, url = {https://arxiv.org/abs/2601.20240}, note = {Source identifier: 2601.20240} }