Specifically, there are properties in nodes and relations:
Library has dist-tags and its release time.
Version has release time and is_deprecated, has_bundle and has_shrinkwrap, these properties are highly related to dependency resolution.
depends has dependency constraint and corresponding satisfying versions.
libaffects has versionlist of affected versions.
This is the DVGraph we used to carry out the empirical study in our paper, and we are considering having official periodic releases of DVGraph in the future to support community research.
Note the vulnerability with vulnerabilityId as "SEC-XXXX-XXXX" are not taken into consideration in our study, they are security bugs we have found for other purposes.