Strictly in accordance with its guidelines and mandated procedures, the index provider compiles, maintains and calculates the underlying index, which consists of all of the of the S&P 500® Index.

Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.