{"id":"W4313563522","doi":"10.1145/3551349.3556896","title":"Not All Dependencies are Equal: An Empirical Study on Production Dependencies in NPM","year":2022,"lang":"en","type":"article","venue":"","topic":"Software Engineering Research","field":"Computer Science","cited_by":17,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Production (economics); Software security assurance; Software; Software engineering; Code (set theory); Empirical research; Backporting; Software development; Computer security; Software construction; Database; Programming language; Information security; Security service","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01217952,0.0002722327,0.0004501799,0.001335165,0.002623352,0.002153381,0.001882403,0.001160254,0.008269885],"category_scores_gemma":[0.111172,0.0003846278,0.0004039906,0.002223343,0.002423013,0.005788053,0.002943021,0.004084718,0.000989035],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001864114,"about_ca_system_score_gemma":0.0020641,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.008442421,"about_ca_topic_score_gemma":0.006875568,"domain_scores_codex":[0.9917612,0.004608705,0.0005005785,0.0007166153,0.001659139,0.0007538286],"domain_scores_gemma":[0.7514598,0.1916266,0.03277094,0.00836347,0.00824111,0.007538125],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0002746193,0.001315536,0.9466726,0.0001394865,0.00007831741,0.0007542383,0.02186782,0.0005993448,0.0001813795,0.005025175,0.002875795,0.02021561],"study_design_scores_gemma":[0.00004426748,0.0003474145,0.9159928,0.0002931897,0.00006127998,0.0006841772,0.05886351,0.006040284,0.0001869284,0.005645345,0.01180961,0.00003113359],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9916414,0.0001943199,0.001114691,0.0007677743,0.00001003827,0.00006021438,0.0001332771,0.00001044915,0.006067884],"genre_scores_gemma":[0.9980628,0.0001048918,0.0007277133,0.0001317728,0.00001122286,0.00006467476,0.000237315,0.00002486123,0.0006347234],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01217952,"threshold_uncertainty_score":0.06441224,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.1050167704964393,"score_gpt":0.3573963752104947,"score_spread":0.2523796047140554,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}