{"id":"W4360948905","doi":"10.1007/s10664-022-10278-4","title":"Empirical analysis of security vulnerabilities in Python packages","year":2023,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":72,"is_retracted":false,"has_abstract":false,"ca_institutions":"Université du Québec à Montréal; Concordia University","funders":"","keywords":"Python (programming language); Computer science; Secure coding; Software security assurance; Software engineering; Security bug; Vulnerability management; Software; Software development; Software bug; Computer security; Ecosystem; Reusability; Programming language; Vulnerability assessment; Information security; Ecology","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0004343687,0.0001848716,0.0004367997,0.001152294,0.00003669563,0.00003312972,0.000477026,0.0001242746,0.00001606893],"category_scores_gemma":[0.001353314,0.0001869125,0.0001901169,0.006206218,0.0000353628,0.0003316925,0.0003101617,0.0003025354,0.00001026559],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001255508,"about_ca_system_score_gemma":0.00002723066,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002703753,"about_ca_topic_score_gemma":0.00001543889,"domain_scores_codex":[0.9983647,0.00006441235,0.000423045,0.0004403187,0.0003324565,0.0003750693],"domain_scores_gemma":[0.9982795,0.0009548275,0.00006449285,0.0005346041,0.00006843529,0.00009820632],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00001206805,0.0001469472,0.64885,0.000186035,0.0002573093,0.0001064298,0.005330871,0.3355256,0.0006834739,0.000561448,0.001513535,0.006826242],"study_design_scores_gemma":[0.000239504,0.000132764,0.6120567,0.00005783767,0.00005411709,0.000005497299,0.00008499203,0.3653557,0.01266012,0.004420194,0.004331416,0.0006011626],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4034013,0.00004574496,0.594264,0.0001778421,0.0001067741,0.00007845595,0.000006299783,0.001906347,0.00001320602],"genre_scores_gemma":[0.9566135,0.00001703142,0.04317218,0.00006395159,0.00002878809,0.00004818791,0.000007488195,0.0000196391,0.00002926104],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.5532122,"threshold_uncertainty_score":0.7622071,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02247784916848785,"score_gpt":0.3112819751728626,"score_spread":0.2888041260043748,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}