{"id":"W4360948905","doi":"10.1007/s10664-022-10278-4","title":"Empirical analysis of security vulnerabilities in Python packages","year":2023,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":72,"is_retracted":false,"has_abstract":false,"ca_institutions":"Université du Québec à Montréal; Concordia University","funders":"","keywords":"Python (programming language); Computer science; Secure coding; Software security assurance; Software engineering; Security bug; Vulnerability management; Software; Software development; Software bug; Computer security; Ecosystem; Reusability; Programming language; Vulnerability assessment; Information security; Ecology","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004173458,0.0003686244,0.0001700168,0.002217725,0.0005300367,0.0006799774,0.0007565536,0.000565602,0.00207358],"category_scores_gemma":[0.0634051,0.0002482753,0.0003579941,0.002041621,0.00152802,0.001942544,0.0009165643,0.001416258,0.0003513661],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006971383,"about_ca_system_score_gemma":0.001007424,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003588099,"about_ca_topic_score_gemma":0.004568242,"domain_scores_codex":[0.9974871,0.00111352,0.0001499231,0.0003108634,0.000710826,0.0002277676],"domain_scores_gemma":[0.867721,0.1024004,0.01676905,0.005582651,0.006508834,0.001018074],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0002219962,0.0009250722,0.9620502,0.0001186922,0.0001335135,0.0002008156,0.001667568,0.005037384,0.001242592,0.00520255,0.001074512,0.02212523],"study_design_scores_gemma":[0.00003390042,0.0004004063,0.9355282,0.0001065809,0.000133062,0.0009597364,0.002161467,0.05015512,0.003132174,0.005413592,0.001945111,0.00003073131],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9980035,0.00005434154,0.001077995,0.00007978965,0.000001379235,0.000009279566,0.0001359456,0.0000202346,0.000617333],"genre_scores_gemma":[0.9990043,0.00003494369,0.0005206909,0.00001484686,0.000003061503,0.000008415847,0.0001798662,0.000009450981,0.0002243703],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.004173458,"threshold_uncertainty_score":0.0220716,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02247784916848785,"score_gpt":0.3112819751728626,"score_spread":0.2888041260043748,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}