{"id":"W3177321543","doi":"10.1109/msr52588.2021.00037","title":"On the Use of Dependabot Security Pull Requests","year":2021,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":41,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Merge (version control); Computer science; Secure coding; Computer security; Security bug; Software security assurance; JavaScript; Software; Application security; World Wide Web; Security service; Information security; Information retrieval; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002014637,0.00004929292,0.00006088423,0.00003052439,0.0000265509,0.00008636346,0.0004644058,0.00002464078,0.00009281521],"category_scores_gemma":[0.001883869,0.00003244761,0.00003018711,0.0003387501,0.00001766309,0.0001550011,0.0002466001,0.0001344557,0.00004844535],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00001886579,"about_ca_system_score_gemma":0.0000712412,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00004298112,"about_ca_topic_score_gemma":0.00001881076,"domain_scores_codex":[0.9992462,0.00006109635,0.00008240146,0.000167225,0.0002992268,0.0001438858],"domain_scores_gemma":[0.9972866,0.001844646,0.00001290903,0.0006984117,0.0001170191,0.00004044568],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.000004213323,0.0001408723,0.006173561,0.00002824843,0.00002907405,0.000156332,0.0004859058,0.001067474,0.001605635,0.9571714,0.02408306,0.00905416],"study_design_scores_gemma":[0.0007174528,0.0003210219,0.07464235,0.0001914342,0.000008086724,0.0001542746,0.00003611764,0.2097588,0.5734851,0.062745,0.07716246,0.0007779225],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5563082,0.00007890764,0.4360771,0.004667512,0.0003463638,0.000144183,0.000002982785,0.0003242678,0.002050586],"genre_scores_gemma":[0.9850484,0.000006118738,0.01411119,0.0002518927,0.00001208458,0.000003703263,4.208159e-7,0.000004241208,0.0005619996],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.8944265,"threshold_uncertainty_score":0.2255304,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05553849144241686,"score_gpt":0.2762570972963118,"score_spread":0.220718605853895,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}