{"id":"W3162867182","doi":"10.1109/saner50967.2021.00048","title":"Empirical Analysis of Security Vulnerabilities in Python Packages","year":2021,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":69,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Python (programming language); Software security assurance; Software engineering; Secure coding; Software; Software development; Computer security; Reusability; Vulnerability (computing); Ecosystem; Security bug; Software bug; Programming language; Information security; Security service","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002616918,0.000289607,0.0002174038,0.002770814,0.0006116258,0.0008197333,0.0005111938,0.0004645891,0.001558998],"category_scores_gemma":[0.03312489,0.0002512474,0.0003835064,0.002549477,0.001432688,0.002355461,0.001208565,0.001179569,0.000332191],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006713633,"about_ca_system_score_gemma":0.0006359787,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003095993,"about_ca_topic_score_gemma":0.0030077,"domain_scores_codex":[0.998133,0.0005479029,0.0001995743,0.0003280873,0.0005423882,0.0002491749],"domain_scores_gemma":[0.9351936,0.03472703,0.02208175,0.00307115,0.003608173,0.001318373],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00008453686,0.00009758373,0.9842972,0.00006817481,0.0000458744,0.000371611,0.002027259,0.001182735,0.0005043574,0.0007565542,0.0006300567,0.009933968],"study_design_scores_gemma":[0.000004137534,0.0000900556,0.9852866,0.00005304506,0.00003697193,0.00111508,0.002412359,0.007844185,0.0009038561,0.000824619,0.001402649,0.00002637798],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9985628,0.00008475296,0.0004438168,0.00006664821,0.000001934254,0.00001180089,0.0002323894,0.00001459819,0.0005812775],"genre_scores_gemma":[0.9989753,0.000083966,0.0003908196,0.00001657209,0.000003976474,0.00001746223,0.0003015237,0.00001029177,0.0002001464],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003095993,"threshold_uncertainty_score":0.01383972,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01922781589977326,"score_gpt":0.3218216007605468,"score_spread":0.3025937848607735,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}