{"as_of":"2026-08-13T21:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:26280ac2dfca7f3e631bd5543b3ab746b8a73e869dbe249943b0ba414f2529a4","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":4,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":4,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T11:18:12.481191Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":15,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","snapshot_observed_at":"2026-08-13T16:05:40.811533Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.04008","snapshot_observed_at":"2026-08-04T11:18:12.481191Z","title":"SoK: Taxonomy of Attacks on Open-Source Software Supply Chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-13T13:52:52.254643Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.481191Z"},"links":{"cited_paper":"/paper/2204.04008","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:dc7d1e2fc942f1f80253bf7f38def1b04346d341417c527c883d5be437c18297","observation_id":"b3c2752a-5338-4cfa-abd6-2cc8564517cb","resolution":{"observed_at":"2026-08-04T11:18:12.481191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","snapshot_observed_at":"2026-08-13T16:05:40.811533Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains","version":2},"cited_work":{"arxiv_id":"2204.04008","doi":"10.48550/arxiv.2204.04008","metadata_source":"arxiv_reference","pith_arxiv_id":"2204.04008","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In: IEEE Symposium on Security and Privacy (SP ’23), pp","venue":"arXiv (Cornell University)","work_id":"edc1c6bf-1798-43fe-b68c-68213e846549","year":2022},"citing_paper":{"arxiv_id":"2605.25055","last_updated":"2026-05-24T13:04:24Z","snapshot_observed_at":"2026-07-06T23:35:01.860096Z","submitted_at":"2026-05-24T13:04:24Z","title":"Building Digital Societies as Ecosystems: How Recognition and Repeat Relationships Sustain Cross-Community Work in Open Source","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T23:47:41.301468Z"},"links":{"cited_paper":"/paper/2204.04008","citing_paper":"/paper/2605.25055"},"observation_digest":"sha256:5eef4688259de0ea131d2526fb0f2b66ff7e6b6fbb494df0c35a800a9ab23c73","observation_id":"416d288b-c0d5-458c-9d30-84521a9641bc","resolution":{"observed_at":"2026-06-29T23:54:02.844820Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","snapshot_observed_at":"2026-08-13T16:05:40.811533Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains","version":2},"cited_work":{"arxiv_id":"2204.04008","doi":"10.48550/arxiv.2204.04008","metadata_source":"arxiv_reference","pith_arxiv_id":"2204.04008","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In: IEEE Symposium on Security and Privacy (SP ’23), pp","venue":"arXiv (Cornell University)","work_id":"edc1c6bf-1798-43fe-b68c-68213e846549","year":2022},"citing_paper":{"arxiv_id":"2606.26291","last_updated":"2026-06-24T18:36:38Z","snapshot_observed_at":"2026-08-08T01:35:17.606927Z","submitted_at":"2026-06-24T18:36:38Z","title":"Beyond Takedown: Measuring Malicious Go Module Persistence in the Wild","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-26T01:27:13.772082Z"},"links":{"cited_paper":"/paper/2204.04008","citing_paper":"/paper/2606.26291"},"observation_digest":"sha256:341b320387b9123d9bd07bee13a98138fe194099a7d841585e9a1baa9bfa2991","observation_id":"a55e2d73-f277-43b5-9670-d1a1ca6e8348","resolution":{"observed_at":"2026-07-04T15:49:56.406200Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","snapshot_observed_at":"2026-08-13T16:05:40.811533Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.04008","snapshot_observed_at":"2026-08-01T05:43:55.005464Z","title":"SoK: Taxonomy of attacks on open-source software supply chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22140","last_updated":"2026-07-24T09:37:00Z","snapshot_observed_at":"2026-08-11T01:18:54.413431Z","submitted_at":"2026-07-24T09:37:00Z","title":"No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T05:43:55.005464Z"},"links":{"cited_paper":"/paper/2204.04008","citing_paper":"/paper/2607.22140"},"observation_digest":"sha256:47730c077ac4335076649b51376eed7cadc9e09729e2a4ccbd88224b3bd0b2b5","observation_id":"b66db5e6-e34a-4fec-9c8d-da0ebd4f3474","resolution":{"observed_at":"2026-08-01T05:43:55.005464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2204.04008/citation-record","integrity":"/paper/2204.04008/integrity","json":"/paper/2204.04008/citation-record.json","paper":"/paper/2204.04008"},"outbound":[],"paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T16:05:40.811533Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 4 inbound Pith citation observations for arXiv:2204.04008."}