{"id":"W3177321543","doi":"10.1109/msr52588.2021.00037","title":"On the Use of Dependabot Security Pull Requests","year":2021,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":41,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Merge (version control); Computer science; Secure coding; Computer security; Security bug; Software security assurance; JavaScript; Software; Application security; World Wide Web; Security service; Information security; Information retrieval; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006894184,0.001304422,0.0006542958,0.004821904,0.001003578,0.002285257,0.001333735,0.001226242,0.001574749],"category_scores_gemma":[0.05103975,0.001261641,0.001118229,0.002325239,0.001251153,0.004358941,0.00293239,0.001624941,0.0008669672],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001296046,"about_ca_system_score_gemma":0.00172189,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.008190009,"about_ca_topic_score_gemma":0.009338,"domain_scores_codex":[0.988303,0.002695177,0.0008531085,0.001874943,0.005290349,0.0009834213],"domain_scores_gemma":[0.9318752,0.03752528,0.01475326,0.007318023,0.006502454,0.002025827],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.000783506,0.0005459789,0.8244662,0.000772276,0.0003879602,0.003380436,0.007043395,0.03354895,0.01975762,0.003954002,0.004052237,0.1013074],"study_design_scores_gemma":[0.00006673215,0.001028923,0.6010516,0.0004391706,0.0004280391,0.004426249,0.003857828,0.3431912,0.01558455,0.006379604,0.02324493,0.0003011789],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9719149,0.0004382453,0.02016762,0.0002802524,0.00002628767,0.0001546736,0.0008613315,0.003337729,0.002819011],"genre_scores_gemma":[0.976123,0.0003025539,0.01814012,0.0001034207,0.00002237992,0.0001261948,0.002299062,0.0008073649,0.00207597],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.008190009,"threshold_uncertainty_score":0.0364604,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05553849144241686,"score_gpt":0.2762570972963118,"score_spread":0.220718605853895,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}