Pith. sign in

REVIEW 1 cited by

What makes a good Node.js package? Investigating Users, Contributors, and Runnability

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2106.12239 v1 pith:2NNHM4YZ submitted 2021-06-23 cs.SE

classification cs.SE
keywords featurespackagecontributorsnodepackagesrunnabilityusersappropriate
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

The Node.js Package Manager (i.e., npm) archive repository serves as a critical part of the JavaScript community and helps support one of the largest developer ecosystems in the world. However, as a developer, selecting an appropriate npm package to use or contribute to can be difficult. To understand what features users and contributors consider important when searching for a good npm package, we conduct a survey asking Node.js developers to evaluate the importance of 30 features derived from existing work, including GitHub activity, software usability, and properties of the repository and documentation. We identify that both user and contributor perspectives share similar views on which features they use to assess package quality. We then extract the 30 features from 104,364 npm packages and analyse the correlations between them, including three software features that measure package ``runnability"; ability to install, build, and execute a unit test. We identify which features are negatively correlated with runnability-related features and find that predicting the runnability of packages is viable. Our study lays the groundwork for future work on understanding how users and contributors select appropriate npm packages.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. A Machine Learning-Based Approach For Detecting Malicious PyPI Packages

    cs.SE 2024-12 conditional novelty 5.0 of 10

    A stacking ensemble classifier using static features, including a new vocabulary-based text feature, detects malicious PyPI packages with a claimed F1 of 94 percent, though the per-class malicious F1 is 88 percent.

Pith tools