"I wasn't sure if this is indeed a security risk": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages. - Rajdeep Ghosh; Shiladitya De; Mainack Mondal (CoRR, 2025)