{"as_of":"2026-08-19T22:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4c0763f190b2ace9692e281d9984dec4b6802c1fa838073fcaaf0935cc9fb899","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":3,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":3,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T10:50:24.675392Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-16T12:30:53.828911Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2112.10165","last_updated":"2022-02-14T14:36:17Z","snapshot_observed_at":"2026-08-19T19:18:28.184089Z","submitted_at":"2021-12-19T15:06:31Z","title":"What are Weak Links in the npm Supply Chain?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10165","snapshot_observed_at":"2026-08-16T10:50:24.675392Z","title":"What are weak links in the npm supply chain?","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.17198","last_updated":"2025-04-24T02:15:45Z","snapshot_observed_at":"2026-08-16T10:44:49.327938Z","submitted_at":"2025-04-24T02:15:45Z","title":"Automatically Generating Rules of Malicious Software Packages via Large Language Model","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-16T10:50:24.675392Z"},"links":{"cited_paper":"/paper/2112.10165","citing_paper":"/paper/2504.17198"},"observation_digest":"sha256:cbe1b3ee4386e1379bc3b9e143dbf230b664cf3b0ff5cfd82f6e1fd84d66ed90","observation_id":"b05d4051-4b04-4dc1-8063-1e41a6734db4","resolution":{"observed_at":"2026-08-16T10:50:24.675392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10165","last_updated":"2022-02-14T14:36:17Z","snapshot_observed_at":"2026-08-19T19:18:28.184089Z","submitted_at":"2021-12-19T15:06:31Z","title":"What are Weak Links in the npm Supply Chain?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10165","snapshot_observed_at":"2026-08-07T10:35:16.197236Z","title":"InProceedings of the 44th International Conference on Software Engineering: Software Engineering in Practice","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.04962","last_updated":"2026-06-28T09:23:55Z","snapshot_observed_at":"2026-08-19T20:41:14.042904Z","submitted_at":"2025-06-05T12:37:33Z","title":"PoCGen: Generating Proof-of-Concept Exploits for Vulnerabilities in Npm Packages","version":4},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T10:35:16.197236Z"},"links":{"cited_paper":"/paper/2112.10165","citing_paper":"/paper/2506.04962"},"observation_digest":"sha256:71309fed72cdf9940c2f7ac8b0e08624e260a5e5bab5cfccf696004f408c0f1f","observation_id":"08a6c56d-fd08-4ea6-a272-17c9babef5e8","resolution":{"observed_at":"2026-08-07T10:35:16.197236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10165","last_updated":"2022-02-14T14:36:17Z","snapshot_observed_at":"2026-08-19T19:18:28.184089Z","submitted_at":"2021-12-19T15:06:31Z","title":"What are Weak Links in the npm Supply Chain?","version":2},"cited_work":{"arxiv_id":"2112.10165","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2112.10165","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"129d0ac2-e114-4c44-85f3-ba97047173c3","year":2021},"citing_paper":{"arxiv_id":"2601.14034","last_updated":"2026-05-01T02:13:20Z","snapshot_observed_at":"2026-08-11T16:40:52.024568Z","submitted_at":"2026-01-20T14:54:58Z","title":"Analyzing the Availability of E-Mail Addresses for PyPI Libraries","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-16T12:30:45.408082Z"},"links":{"cited_paper":"/paper/2112.10165","citing_paper":"/paper/2601.14034"},"observation_digest":"sha256:f4d728ab9fcaa6e4723790632c9c8de6b3d1db8c88347ce0c821d32fb1aab0b9","observation_id":"55b68e52-7b64-4535-a27a-bf51d7d0b47e","resolution":{"observed_at":"2026-05-16T12:30:53.830767Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2112.10165/citation-record","integrity":"/paper/2112.10165/integrity","json":"/paper/2112.10165/citation-record.json","paper":"/paper/2112.10165"},"outbound":[],"paper":{"arxiv_id":"2112.10165","last_updated":"2022-02-14T14:36:17Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T19:18:28.184089Z","submitted_at":"2021-12-19T15:06:31Z","title":"What are Weak Links in the npm Supply Chain?"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 3 inbound Pith citation observations for arXiv:2112.10165."}