{"id":"W3036270494","doi":"10.1007/s10664-021-09951-x","title":"Lags in the release, adoption, and propagation of npm vulnerability fixes","year":2021,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Information and Cyber Security","field":"Computer Science","cited_by":56,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Japan Society for the Promotion of Science","keywords":"Vulnerability (computing); Empirical research; Vulnerability assessment; Software release life cycle; Software","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002781567,0.00005664182,0.00007819528,0.00003162465,0.0000323127,0.00004283375,0.0001466596,0.00003585887,0.000005835728],"category_scores_gemma":[0.0003915024,0.00004380635,0.00002236883,0.0003581425,0.00001272805,0.0002842973,0.00006509606,0.0001265711,0.000002301795],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00001845714,"about_ca_system_score_gemma":0.00003080484,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000006331532,"about_ca_topic_score_gemma":0.000005024196,"domain_scores_codex":[0.9994193,0.00004174135,0.0001793891,0.0001092181,0.0001548592,0.00009550833],"domain_scores_gemma":[0.9995222,0.00016863,0.0000274314,0.0001936258,0.00006156186,0.00002653215],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00002316296,0.0007273441,0.6566589,0.001325342,0.00004819216,0.0000844536,0.05419667,0.0417157,0.0007663313,0.1034235,0.00354672,0.1374836],"study_design_scores_gemma":[0.0003484197,0.00004011228,0.8918744,0.00005534598,0.000003751552,0.00003820608,0.000124995,0.09294318,0.002981853,0.001138096,0.01024313,0.0002085563],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4734582,0.0001187316,0.5253202,0.0007952777,0.0000720372,0.00006966795,0.000001177416,0.00007355165,0.00009114479],"genre_scores_gemma":[0.9861366,0.000006813271,0.01357435,0.0002464995,0.00001628217,0.000008130864,0.000003540963,0.000002034781,0.000005722459],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.5126784,"threshold_uncertainty_score":0.1786371,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01449119628158609,"score_gpt":0.246677101234731,"score_spread":0.2321859049531449,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}