TY - RPRT TI - Understanding npm Developers' Practices, Challenges, and Recommendations for Secure Package Development AU - Anthony Peruma AU - Truman Choy AU - Gerald Lee AU - Italo De Oliveira Santos PY - 2026 DO - 10.1145/3794860.3794908 UR - https://arxiv.org/abs/2601.20240 ID - 2601.20240 ER -