That practice of “not publishing all code and data” really sets off the BS detector.
If the vast majority of papers can't even get that right, I don't care as much about the HN idea of what 'reproducibility' is - i.e. check if 'git clone <xyz> && run_model.sh && run_tests.sh' says 'All OK!' at the end.
There’s an article on the front page of HN about a nature retraction that came from someone asking authors of a paper for their data. That tells me that the data can be useful for fixing suspicions results. But also that simply asking for it can be sufficient. I wonder how often authors say no to data requests. My guess is only in the fishiest cases and in old cases. Publishing code and data isn’t high up the priority list, but in a lot of studies, it’s simple enough to be good ROI.