{"id":"W4411271558","doi":"10.1109/msr66628.2025.00064","title":"Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks","year":2025,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Calgary","funders":"","keywords":"Computer science; Dependency (UML); Tracing; Software engineering; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002218271,0.00007702252,0.000154993,0.0002003044,0.00004110669,0.00003011364,0.0002226838,0.00003835747,0.000002925788],"category_scores_gemma":[0.00005259757,0.00007154619,0.00001537378,0.0003751337,0.00002434968,0.0002885383,0.0002035941,0.0001212358,1.417092e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002332755,"about_ca_system_score_gemma":0.0000162682,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001898859,"about_ca_topic_score_gemma":0.001035891,"domain_scores_codex":[0.999251,0.00006852486,0.000235304,0.0002435559,0.00008516993,0.0001164546],"domain_scores_gemma":[0.9994586,0.0001710935,0.00004210967,0.0002739017,0.00003621791,0.00001809374],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005428978,0.001251765,0.09462594,0.0001777206,0.00005449108,0.00004126624,0.009608897,0.0225455,0.0006690415,0.08669441,0.0001543878,0.7841223],"study_design_scores_gemma":[0.002930295,0.002436551,0.1562796,0.0004187137,0.00002271098,0.00003153237,0.01538274,0.5175885,0.04266978,0.261232,0.0001311453,0.0008764885],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3475688,0.0001081917,0.6506923,0.00003768183,0.00005008296,0.0002011233,8.248917e-8,0.0001495029,0.001192166],"genre_scores_gemma":[0.9702904,0.00001255483,0.02945578,0.0000467094,0.000004443744,0.00003857847,4.308066e-8,0.000002630027,0.0001488732],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7832458,"threshold_uncertainty_score":0.2917569,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.007000800409386004,"score_gpt":0.2660302293506109,"score_spread":0.2590294289412249,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}