{"id":"W4411271558","doi":"10.1109/msr66628.2025.00064","title":"Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks","year":2025,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Calgary","funders":"","keywords":"Computer science; Dependency (UML); Tracing; Software engineering; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004058162,0.0002986202,0.0002433772,0.005108701,0.0007039128,0.001507984,0.0007077726,0.00043596,0.0008259412],"category_scores_gemma":[0.0282405,0.0004252035,0.0005683905,0.003710401,0.0009916674,0.004705386,0.001567237,0.0008505714,0.0001883956],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001531579,"about_ca_system_score_gemma":0.001390882,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01378411,"about_ca_topic_score_gemma":0.01328266,"domain_scores_codex":[0.9980714,0.0008081575,0.0001345297,0.0003572782,0.0004241325,0.0002045064],"domain_scores_gemma":[0.9676015,0.01862581,0.006105287,0.00379118,0.003149372,0.0007268359],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0002119709,0.0002659893,0.8049448,0.0002690744,0.0001552717,0.001357092,0.01069635,0.03971939,0.004609156,0.02452024,0.003201795,0.1100489],"study_design_scores_gemma":[0.00002186719,0.0002716675,0.5887129,0.0002582757,0.0001888561,0.002353692,0.01093593,0.3311317,0.006484345,0.02758879,0.03191392,0.0001379518],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9721314,0.000411985,0.02288639,0.0003615819,0.000007131155,0.00007629457,0.0005428078,0.0004265429,0.003155828],"genre_scores_gemma":[0.9814528,0.0003031702,0.01604564,0.00004939211,0.000005138899,0.00007697334,0.0009782456,0.00018752,0.0009010748],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01378411,"threshold_uncertainty_score":0.02740777,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.007000800409386004,"score_gpt":0.2660302293506109,"score_spread":0.2590294289412249,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}