{"id":"W4313563522","doi":"10.1145/3551349.3556896","title":"Not All Dependencies are Equal: An Empirical Study on Production Dependencies in NPM","year":2022,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":17,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Production (economics); Software security assurance; Software; Software engineering; Code (set theory); Empirical research; Backporting; Software development; Computer security; Software construction; Database; Programming language; Information security; Security service","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001469376,0.0001566646,0.0001703242,0.0004318547,0.000172396,0.0001431853,0.001288578,0.00003323299,0.00006250879],"category_scores_gemma":[0.0007687593,0.0001481748,0.00003399348,0.0008981597,0.00002005465,0.0004941105,0.0008968901,0.0005562254,0.00004403991],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003442806,"about_ca_system_score_gemma":0.0001111822,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001916696,"about_ca_topic_score_gemma":0.0003842106,"domain_scores_codex":[0.9968905,0.0003229846,0.0002311661,0.0007442097,0.001381981,0.0004291691],"domain_scores_gemma":[0.9985224,0.0003720413,0.0000398186,0.0008919319,0.00006830929,0.0001054686],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00005904226,0.002800751,0.9245179,0.00001983679,0.00003527088,0.0004748963,0.0205402,0.04216688,0.001409103,0.0009027272,0.002798305,0.004275134],"study_design_scores_gemma":[0.0004928279,0.001972038,0.974902,0.00000632754,0.000003166303,0.00005523432,0.007182422,0.01143527,0.002612798,0.0003128113,0.0006389188,0.0003861685],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9844917,0.00001993728,0.01241083,0.001398551,0.000536692,0.0004780707,0.000001325726,0.0005817672,0.00008108844],"genre_scores_gemma":[0.9970644,8.738066e-7,0.001901049,0.0002557498,0.0000591208,0.0002057023,0.000001601335,0.0000170211,0.0004945375],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.05038417,"threshold_uncertainty_score":0.6042392,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.1050167704964393,"score_gpt":0.3573963752104947,"score_spread":0.2523796047140554,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}