{"as_of":"2026-08-09T20:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6afa5544aa78b04d84d6dd448b64e32a576b2609ea640430918686ea72666c5e","coverage":[{"denominator":80,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":80,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:41:18.741692Z","state":"measured"},{"denominator":81,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":81,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:31:17.975540Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T00:31:19.886341Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"cited_work":{"arxiv_id":"2506.12995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.12995","snapshot_observed_at":"2026-08-06T00:31:19.886341Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","venue":"cs.CR","work_id":"2b2bdc7f-6c5d-4578-afd8-12c31fc16123","year":2025},"citing_paper":{"arxiv_id":"2608.02669","last_updated":"2026-08-02T13:57:28Z","snapshot_observed_at":"2026-08-08T23:16:13.137463Z","submitted_at":"2026-08-02T13:57:28Z","title":"Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T00:31:17.975540Z"},"links":{"cited_paper":"/paper/2506.12995","citing_paper":"/paper/2608.02669"},"observation_digest":"sha256:831043074edca3b5ca14216b9663b62e900141f2de30c46d84fbac3e16a88882","observation_id":"5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89","resolution":{"observed_at":"2026-08-06T00:31:19.938494Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.12995/citation-record","integrity":"/paper/2506.12995/integrity","json":"/paper/2506.12995/citation-record.json","paper":"/paper/2506.12995"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.249759Z","title":"As- apy: A python library for aerospace simulation analysis,","venue":null,"work_id":"1964d113-14f9-47aa-b481-19265ef5cfcd","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.391419Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e27864775f2440fab30cdf7f3b1f0aad4c8f4a80654f9700d8abe055e48e0305","observation_id":"ae68133b-e5ea-45d2-bb5b-d712bacc2f99","resolution":{"observed_at":"2026-08-07T00:41:20.254582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.235134Z","title":"A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,","venue":null,"work_id":"e009254b-2862-4b33-a7f2-5f157aeb4b6f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.478313Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:50c79251e713f254d80deefdf8caa8fd682939b8ffe97d42fff9dc94218f39b3","observation_id":"43dcde1f-e298-42d1-9075-9dde4bb1adc0","resolution":{"observed_at":"2026-08-07T00:41:20.240263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.220204Z","title":"Formation control method based on artificial potential fields for aircraft flight simulation,","venue":null,"work_id":"9b32f33c-b10b-4248-8a67-01c02ac84568","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.613314Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:15d8c185f2d07871ab5e354138289a60cf87fbe835f8e9c900383536f9ba72b9","observation_id":"d5e403b9-6522-4cb5-aed6-2b3b416ebbaa","resolution":{"observed_at":"2026-08-07T00:41:20.225801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.205590Z","title":"Open source soft- ware and global entrepreneurship,","venue":null,"work_id":"06f93e8d-01a3-4748-9fd8-037efe1bcfa4","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.694678Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:b15c6751754f6497e23781693cab7af73b280bb466f72233d8fe5a1f84a3129b","observation_id":"1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb","resolution":{"observed_at":"2026-08-07T00:41:20.210324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:15.817244Z","title":"Fingpt: Open- source financial large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.817244Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f5f1f8256e0a78b095c3307ae9e63143dcabaf57e8ed2daaed454b34144e6ac4","observation_id":"976373d7-feb5-498d-b9e5-f5985fd785fd","resolution":{"observed_at":"2026-08-07T00:41:15.817244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.190333Z","title":"Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,","venue":null,"work_id":"6bd45d80-1107-48be-9fe9-c4269fd9c8eb","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.932060Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8e8eaf0f8774afe46e4a8dc193ddb9313cd50c614b45173062b39593ef725ebd","observation_id":"274a5120-5d37-47f9-a495-30c0483ea848","resolution":{"observed_at":"2026-08-07T00:41:20.195515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.176173Z","title":"Open source development: A double-edged sword,","venue":null,"work_id":"6ade051e-86a9-41a9-9de3-3728cc56fe2c","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.036048Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:be7e5de54bc75d1cfd3a89480b2175d9e6e1c7793c6540e6de49379046a6ac8f","observation_id":"df7cbab4-0dd6-4263-aec2-62d87431b68d","resolution":{"observed_at":"2026-08-07T00:41:20.180371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.161160Z","title":"Impact of using open source software on cyberse- curity,","venue":null,"work_id":"fa02d497-13cc-4eae-b28e-6dd2054b60a2","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.157152Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1242047f999ad7c44f9f990577760499de0481d9e4bd8e22ae63ecbddf91ffe6","observation_id":"9fdfc375-7e45-48b3-9118-b47296ff5782","resolution":{"observed_at":"2026-08-07T00:41:20.166617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.144736Z","title":"27 malicious pypi packages with info- stealing capabilities discovered,","venue":null,"work_id":"2c2b873e-4b3e-45bc-bb51-13c492133671","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.274147Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c584483f069cd0aabdc139c775dfb5087a9c5e18c1b80d6274b7f629f60b29ab","observation_id":"c6973a6f-42bd-40c2-9f23-dd12c4a5724f","resolution":{"observed_at":"2026-08-07T00:41:20.149657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.129317Z","title":"The hidden economy of open source software,","venue":null,"work_id":"5226123f-a7b3-4042-bf96-2fa383f99282","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.367592Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8cf167fe9d2a8b67839c1be44364693b237d703124799ccdd5f9996ec669c806","observation_id":"a9b0eb19-5827-4e9a-820e-b35cbc440795","resolution":{"observed_at":"2026-08-07T00:41:20.134558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.114139Z","title":"Dozens of npm packages caught attempting to deploy reverse shell,","venue":null,"work_id":"2afee9c4-adfc-47fd-8685-95341ddd9ce7","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.482235Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:00c71b55c08e49063466cf0d45178e72834d33518ff6cad969888c5fb614aa38","observation_id":"a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7","resolution":{"observed_at":"2026-08-07T00:41:20.119693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.099044Z","title":"Hundreds of malicious python packages found stealing sensitive data,","venue":null,"work_id":"788f2945-a19a-4ee9-9312-d18881851b59","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.599845Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:21a50c7084cf4ca8f00d15857273be3b7e689e4b23b1a9eb697abeb0f45d9257","observation_id":"737c72ec-5921-480a-aaf2-fee0dc79e823","resolution":{"observed_at":"2026-08-07T00:41:20.103553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.084188Z","title":"Securing open source software act","venue":null,"work_id":"b9a1d35e-25df-400a-8adb-b2442293922a","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.738793Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0c69ef0fe0a3383967cd4502fa9478e1c49cb936ba1cf0a2aba7afe6881678b9","observation_id":"30f7f07b-caf3-499a-b451-24b3fb21d327","resolution":{"observed_at":"2026-08-07T00:41:20.088767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.069212Z","title":"Summary of the 2023 request for information on open source software security","venue":null,"work_id":"ed157303-3e96-4460-b7e9-af1803bc921a","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.899241Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:64312c858da82c26d367b2e9552eaf4eedc24a08e5fa7732dc158402451fd4d1","observation_id":"afcfe3a7-cbb8-4f34-b711-a172ef9ec48c","resolution":{"observed_at":"2026-08-07T00:41:20.074844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.051695Z","title":"Cisa open source software security roadmap","venue":null,"work_id":"32a00d28-48fa-4ea9-b9fb-56f16e43f63f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.959603Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8a44f053a69ab63ad83a0f06b6f2a3dec0f8e56bcfbb4ae6cc3f704c96915b1d","observation_id":"dcfea0ad-182c-4208-ae41-dca6b326ee85","resolution":{"observed_at":"2026-08-07T00:41:20.058420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.036548Z","title":"Top web development languages","venue":null,"work_id":"c309faf3-b234-47cc-8672-60ccc11d7f82","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.094990Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:b7550bbc5626467d8aad8fd6cc9a2eafaaa405eb88ac8ff967ff813dd84840a6","observation_id":"43e960de-537c-41b6-a1f3-fdd546ebc97e","resolution":{"observed_at":"2026-08-07T00:41:20.041151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.019707Z","title":"Best languages for web development","venue":null,"work_id":"2949a1e9-7c36-449f-ae3e-9cc9a09928b2","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.177631Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a7377bedb3f32a8d7a5115bf9c99a3796e16e91a0a15225c7543c05eb3806183","observation_id":"fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4","resolution":{"observed_at":"2026-08-07T00:41:20.025113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.005070Z","title":"Best languages for web development","venue":null,"work_id":"85aeef7a-08b8-41d4-9932-45c27ed9efe4","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.229547Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:aa7724009181ef6e3fd8b8d459ddbf9b756aa90c8a9083c3fa6c398a360e0907","observation_id":"47833b2c-748c-4e62-ac14-25736f0f99b1","resolution":{"observed_at":"2026-08-07T00:41:20.009304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.989566Z","title":"Best languages for web development","venue":null,"work_id":"92097d60-5aa4-4cb8-892a-5111384b223f","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.282845Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:2dd0f86f52d965895faa70e3dd5edc8e0f16cec518abbb975d00560e7d5908ef","observation_id":"46861d48-4678-43f6-8729-2932bbfa6e84","resolution":{"observed_at":"2026-08-07T00:41:19.994200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.975402Z","title":"Empirical analysis of security vulnerabilities in python packages,","venue":null,"work_id":"5ff51a65-af10-49d4-aaee-6cc7512143da","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.322669Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:71d7a78257127718172a236f02eb8089b81ce66d608427981f5477b85f49913b","observation_id":"ab98dd44-5c3a-4d9d-939d-441a5443116e","resolution":{"observed_at":"2026-08-07T00:41:19.979876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.960022Z","title":"Small world with high risks: A study of security threats in the npm ecosystem,","venue":null,"work_id":"efce4fd1-5c43-4c50-ad8f-dec96d6deaef","year":2019},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.365173Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:5615b20904d40b2f1f6d471fcea4d218af8966661f460ae9204f8f8100ab1f4e","observation_id":"3c138664-fe12-4918-bf5b-2fcb1929325f","resolution":{"observed_at":"2026-08-07T00:41:19.964782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01139","last_updated":"2020-12-02T17:40:57Z","snapshot_observed_at":"2026-08-08T23:08:54.384750Z","submitted_at":"2020-02-04T06:10:18Z","title":"Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01139","snapshot_observed_at":"2026-08-07T00:41:17.469971Z","title":"Towards measuring supply chain attacks on package managers for interpreted languages,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.469971Z"},"links":{"cited_paper":"/paper/2002.01139","citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:ec1a295562b8344b26795eccf8cf11c606dac7cfc8030eff7d4712d2b0c30c8d","observation_id":"6240d4cf-84af-4617-94e7-d08fbd221131","resolution":{"observed_at":"2026-08-07T00:41:17.469971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.943637Z","title":"Do software security practices yield fewer vul- nerabilities?,","venue":null,"work_id":"4c975f79-803a-4ef8-8bf5-b1325c33d27a","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.591706Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:ce5265039b06ffb1e7f3292cfa4d9f16ec25a70d69a5986099ee9b9964597c75","observation_id":"88f464a8-a85b-490d-9ae6-4fd1d136787f","resolution":{"observed_at":"2026-08-07T00:41:19.950057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.928525Z","title":"An empirical comparison of dependency issues in oss packaging ecosystems,","venue":null,"work_id":"9ca44f30-b6fe-4be4-bec0-f7f9130b0259","year":2017},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.650349Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:163063a041d3bba8f965fad4696a6d082d64a806ec2b4f616132fb0ba60f5840","observation_id":"4aa3aa75-94ea-4586-a50d-a95ad31e1379","resolution":{"observed_at":"2026-08-07T00:41:19.933844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.914658Z","title":"An empirical comparison of dependency network evolution in seven software packaging ecosystems,","venue":null,"work_id":"902f24e5-4bd6-4430-89b6-f029d8a9c4f4","year":2019},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.725197Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:5058759f1bd75ac39659fbb08d063ae1ea3d6d2308f81440ff5a99284619442a","observation_id":"effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4","resolution":{"observed_at":"2026-08-07T00:41:19.919148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.899954Z","title":"Structure and evolution of package dependency networks,","venue":null,"work_id":"e52f7890-5a1b-4160-b638-55f352762d38","year":2017},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.844856Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0eb49643b7ef09e22bbbf742073d234d9ddf93b7ef4f18db7c0f5ae192284b5c","observation_id":"ac7a2834-9612-4f8c-8d04-bdc76155363d","resolution":{"observed_at":"2026-08-07T00:41:19.904636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.884440Z","title":"On the impact of se- curity vulnerabilities in the npm package dependency network,","venue":null,"work_id":"38d4887b-2323-4523-8295-9df208b77713","year":2018},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.872690Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1b7b6ea51885d68d8e2e82d373282dd45c619ecb6e1464d92ba9fe705a45f994","observation_id":"d78b4291-1340-4d26-b57c-fb578ea630e3","resolution":{"observed_at":"2026-08-07T00:41:19.889080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.869895Z","title":"On the impact of security vulnerabilities in the npm and rubygems dependency networks,","venue":null,"work_id":"785cac3b-71de-47e7-84b7-d3f5e4c81485","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.877137Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:341124db7175a724d4c084533e95b9df96b6ec2d2837dc489f867a312acb40a7","observation_id":"f2c65bf3-3524-4af7-b76f-fa825ddb501c","resolution":{"observed_at":"2026-08-07T00:41:19.874507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.854679Z","title":"Vulnerable open source dependen- cies: Counting those that matter,","venue":null,"work_id":"4536bd88-3607-4de9-92e7-7f6502964b3f","year":2018},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.893228Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:93f883240190e25ffbd2029b2eddd0b6dd8be8cc04b979ac6ca5850423b45e75","observation_id":"8980cd96-0fb6-4e47-b513-50ea5d6bbff8","resolution":{"observed_at":"2026-08-07T00:41:19.859695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.839429Z","title":"Common vulnerabilities and exposures (cve)","venue":null,"work_id":"1692d7cb-0f4a-486b-abe9-2e981ed090ee","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.973348Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0debb3c81cd35ece489fab468aab0b6e9fd23b6de3fb08cd9535d88f871cd312","observation_id":"3527b220-e0da-4787-bec3-7926dd5f7d3f","resolution":{"observed_at":"2026-08-07T00:41:19.843838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.825790Z","title":"Mitre corporation","venue":null,"work_id":"019ac64f-07be-4d09-8f19-d1e4cfde1b54","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.033048Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:bbfa7c4078c50c8ea05378378ae8d848fe68e30d058daad839b9a1f9dab9225e","observation_id":"2e20f57f-5f2c-44b7-a9ba-5856b7c70060","resolution":{"observed_at":"2026-08-07T00:41:19.830194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.808990Z","title":"Common weakness enumeration (cwe)","venue":null,"work_id":"fc17c846-5627-45bc-97e0-4ce8726ed69c","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.097151Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:2b670ff18c4d3c82e7d33c1e4d90954a9c202deed49153c5a486b6b65d079538","observation_id":"b320f51f-c304-42a8-8b7c-c5df9b80722a","resolution":{"observed_at":"2026-08-07T00:41:19.814428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.793964Z","title":"National vulnerability database (nvd)","venue":null,"work_id":"899ae9e6-1d8a-4b9d-8bcc-a2b92ec821c3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.228485Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:bc277924ce1541e4dcf95295b9373828126f92c71f5f45f0cfcbd44a4aa030c5","observation_id":"1b014856-3bcf-442e-97f5-7e3e92b09764","resolution":{"observed_at":"2026-08-07T00:41:19.799050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.779055Z","title":"What are weak links in the npm supply chain?,","venue":null,"work_id":"66c89a33-d6be-46bb-b8f8-8a27337dc1ed","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.335827Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:cfd47c7d90013a7e0e70d08d4378ab31fb8c71e0eb14de007e00e4be3dc81bb6","observation_id":"bffd80ae-84a7-41c1-94e5-966103df42b6","resolution":{"observed_at":"2026-08-07T00:41:19.784096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.764155Z","title":"github/advisory-database,","venue":null,"work_id":"4abe19a5-0aad-4718-baef-f777971073db","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.410880Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:cbfc290221320648e73499ce941726adaba3f755cb3d69f0daa6f80d790860cf","observation_id":"2ae82ce8-f748-48ad-ab89-f397bce5bce6","resolution":{"observed_at":"2026-08-07T00:41:19.769238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.749116Z","title":"Snyk vulnerability database","venue":null,"work_id":"9ec3ae4e-8b60-449b-acca-5e18f54d8fcd","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.472896Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:85e694336ecfb5df5dab8696b28e13c34c571ee07421ec0f0e4a043daa6d7c39","observation_id":"d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12","resolution":{"observed_at":"2026-08-07T00:41:19.754364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.731539Z","title":"Libraries.io - discover open source libraries","venue":null,"work_id":"7d4380da-285e-4b1d-9928-ae3692c69ee6","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.507508Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:92fd82d22c437e92c5014091c801c14a679b432beee8b5d132af88eca0159624","observation_id":"5bc59b39-5fef-40ef-8e01-698213cccd15","resolution":{"observed_at":"2026-08-07T00:41:19.736896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.716522Z","title":"Build software better, together","venue":null,"work_id":"392d01d9-7716-49d6-9e79-11acfe1a3902","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.522755Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:02e2619ba99aae3735e4d144cb6c9b2e36b7f93397bbb34c5926391d85f5f14d","observation_id":"eb1f0467-7037-45ab-92e5-8ac7236d049f","resolution":{"observed_at":"2026-08-07T00:41:19.720966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.701138Z","title":"Open Source Vulnerability format - Open Source Vulnerability schema,","venue":null,"work_id":"da04b259-eab8-4aaf-bd7c-75940487c982","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.527494Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1509176660668488c64fabd65be22d6dcc091584ab766090a8864913c242d1ef","observation_id":"4ae11505-3725-4faa-abf4-65357f71e16f","resolution":{"observed_at":"2026-08-07T00:41:19.706420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.686463Z","title":"On measuring vulner- able javascript functions in the wild,","venue":null,"work_id":"7faa32a8-28bd-48ec-91e7-a705ef6958d7","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.531505Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:09cbe4dbaea118056af9dcd9e5ff2f36a830a3970c210ab709845cc428f7a2a9","observation_id":"22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2","resolution":{"observed_at":"2026-08-07T00:41:19.690884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.670306Z","title":"To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,","venue":null,"work_id":"a43075a1-f8b5-4d28-abe3-6d38518deed4","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.535604Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:73286e7199a2ea1d70d800d8ddaeb6fecb1a09c1ebd34e04d47bf9555f6c9a01","observation_id":"7f3cd61e-829a-4387-8198-12e83aaa323f","resolution":{"observed_at":"2026-08-07T00:41:19.675934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.652425Z","title":"Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,","venue":null,"work_id":"4a9727a2-bf0d-4794-9770-eff00a96d669","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.539935Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:3a61bee6879b833dd9ca603f66155c20f634986ae031e0b69c4ee615b15eceaa","observation_id":"bd22e318-170c-424c-afe0-9e77cde90a0b","resolution":{"observed_at":"2026-08-07T00:41:19.658690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10345","last_updated":"2023-08-20T19:33:12Z","snapshot_observed_at":"2026-07-06T16:08:17.076884Z","submitted_at":"2023-08-20T19:33:12Z","title":"Can Large Language Models Find And Fix Vulnerable Software?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10345","snapshot_observed_at":"2026-08-07T00:41:18.544516Z","title":"Can large language models find and fix vulnerable software?,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.544516Z"},"links":{"cited_paper":"/paper/2308.10345","citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:86ee13ca28e9648746a6609a6c3cb98eed918aedd7f2ed3e94bef8cd25a40fa3","observation_id":"2ac46f0c-9e02-4125-8e77-be517112cdfb","resolution":{"observed_at":"2026-08-07T00:41:18.544516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.635364Z","title":"Wayback machine,","venue":null,"work_id":"9dba0e53-4c74-4319-bbaf-1ca7cb0fc118","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.549508Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:eb6b6c213b4979c6d45b64fa35d7d4d2379ea99cbacffbae576e10fda7c09cfc","observation_id":"818cc7be-1636-47c1-b833-763a2f2c67fd","resolution":{"observed_at":"2026-08-07T00:41:19.640685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.618328Z","title":"Log4shell: The vulnerability explained,","venue":null,"work_id":"c70393ea-0d5c-477e-865f-b13286df2087","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.554762Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:78312ce07e08c475440f406a3faaaece23eccecd653fcd1041c3625632c63289","observation_id":"9bbf87f5-0e75-48c3-b2d6-79275ef24df3","resolution":{"observed_at":"2026-08-07T00:41:19.623664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.599668Z","title":"US govt offers $10 mil- lion bounty for info on Clop ransomware","venue":null,"work_id":"a2da901e-3c78-4bc2-aaf4-8367e3944d69","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.560330Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:b2a15df0c9193a2c7d459500de08f2a1628eecc1a50ffb3130809ec12bd65b1b","observation_id":"4f958e5b-28d2-448d-8cda-d275e8f68bcf","resolution":{"observed_at":"2026-08-07T00:41:19.605382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.582186Z","title":"Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group","venue":null,"work_id":"432fe6c3-fa72-4512-a0af-737e8bba25da","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.565889Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1e751e598b6a03f8b10dce9f91fe4400d06f5bbeee0c02381b0a7c046159a4c4","observation_id":"4d373fca-9e60-4013-bfa3-4d3b894b665e","resolution":{"observed_at":"2026-08-07T00:41:19.587946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.563023Z","title":"The SolarWinds Cyber-Attack: What You Need to Know","venue":null,"work_id":"1ef3036a-ef5f-4265-86bc-fe2a07175207","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.571537Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0d6c04aebb9887a759c0956c8668cea533ca54b99d18bb06c849eb1db5ad073d","observation_id":"a5e49f92-9df2-4a23-9e56-06d94861ae7c","resolution":{"observed_at":"2026-08-07T00:41:19.569293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.547444Z","title":"Go modules reference","venue":null,"work_id":"1454132d-738c-4838-8ea1-01133d0907e2","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.577357Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:3dcf18d411481aadf14339a7465af70b0e45b765663f00e1d952dccb635840b7","observation_id":"3bb42e3c-23da-4bde-85af-be3f59a99dab","resolution":{"observed_at":"2026-08-07T00:41:19.551478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.531215Z","title":"Go proxy","venue":null,"work_id":"4eee94e3-db6b-4de2-a229-fcc28e2fe02f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.582923Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:899c71b4a6cbc1860891083281adc894aeda8175fde5e272dd5d75bae04a321d","observation_id":"7bfbb399-eaf0-4c14-bb08-12734ab2f5db","resolution":{"observed_at":"2026-08-07T00:41:19.535752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.515024Z","title":"Using theGO111MODULEeverywhere!","venue":null,"work_id":"0bd266ac-231b-421e-bb34-b4c8bc3c1b70","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.588752Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7d875e5ee6f05f0ee9a5d651bda0353055cf3ae99793cfb8d1c95a6b1998f56a","observation_id":"7db59566-1e16-4fcf-a710-e4ce2e86333a","resolution":{"observed_at":"2026-08-07T00:41:19.520383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.498767Z","title":"I know what you imported last summer: A study of security threats in thepython ecosystem,","venue":null,"work_id":"cfc5f63d-581f-47c7-8239-6c83247cf3e1","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.594853Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e19b33620dccd84af0862ca48a894ad08f75881f1ed54932fae3a0ee7440e10f","observation_id":"cbd118c2-f823-4dac-ac74-e26e55b8fdc8","resolution":{"observed_at":"2026-08-07T00:41:19.503677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.480627Z","title":"An empirical study of malicious code in pypi ecosystem,","venue":null,"work_id":"5ff9462d-f56b-438b-8e83-e18175c96e64","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.600474Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:de6269d78de20b2cc9938ed11121b7b217697baf913b4e8fe76ae4138759d7f1","observation_id":"cc9e079c-5451-42cc-bd30-93b5843442df","resolution":{"observed_at":"2026-08-07T00:41:19.486592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.464954Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks,","venue":null,"work_id":"ee1c9842-fef7-4472-947a-7e0dcb097048","year":2020},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.605869Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a15426d3ea1041d61d1cd7a2c112dbaa16838069f5cefd28ba8a28c0802c8088","observation_id":"cf8d7c1b-6b99-4586-a391-111db2112e78","resolution":{"observed_at":"2026-08-07T00:41:19.469936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.449363Z","title":"Dependency confusion: How i hacked into apple, microsoft and dozens of other companies","venue":null,"work_id":"80557875-c8f4-4bea-b53c-710770da251e","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.611636Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e3c16d30fcdfb20478c3ff1474312061702fdc534c3d07ab1035de250fec9643","observation_id":"fd3be95a-8ca8-4e0a-a258-636afb299d37","resolution":{"observed_at":"2026-08-07T00:41:19.454775Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.433120Z","title":"npm dependency confusion attack targeting gxm refer- ence","venue":null,"work_id":"730b76a2-6160-4b40-aaec-b0ee95cb3764","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.617257Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:19cc365d3e71e85e45917b9630bca8ef6c669e59b0a6a5ecc94d2d3dd3151d70","observation_id":"a8050465-59ea-486a-8f8f-c490a36bf1db","resolution":{"observed_at":"2026-08-07T00:41:19.438315Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.418013Z","title":"SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me","venue":null,"work_id":"beb45ce9-1bbb-4a07-848f-bc515eb88c82","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.621862Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d768efc27dcb0d97db21c7bf5cfceca4c1b275870c2ed8942fb4b21831da53d5","observation_id":"08c35435-1063-460f-9930-4e19a7621d63","resolution":{"observed_at":"2026-08-07T00:41:19.422985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.401587Z","title":"SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics","venue":null,"work_id":"b9a017f5-c128-4f4c-9ee9-666d1294a8a3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.627419Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1f450d7fa9b99525721c7f32b8b4b77dbc597feab3bf7ab8ec9c25d7e355ccdc","observation_id":"b918144e-93c5-4af9-a617-2d1d9c50dc2a","resolution":{"observed_at":"2026-08-07T00:41:19.407686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.382440Z","title":"SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy","venue":null,"work_id":"d1b0d234-f24c-4965-b3fe-6fc62bdc151e","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.632208Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d59cdac94edef3cd4816e86edca823fd927b1c960f02e12d36567df38ea1a207","observation_id":"6655a007-0d2c-4e18-8ab0-252f3f233988","resolution":{"observed_at":"2026-08-07T00:41:19.388479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.365807Z","title":"SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc","venue":null,"work_id":"29322aa3-d893-43e5-acd8-6e01ed3c7572","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.637451Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:129e238bbd55cc4a41f1d462c0032ca2ac77d42fc4f6ecd55059cbc86926e7a6","observation_id":"d609e2c2-40e1-472a-984e-692dabcdf8bc","resolution":{"observed_at":"2026-08-07T00:41:19.370302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.348366Z","title":"The family of safe golang libraries is growing,","venue":null,"work_id":"bcc7f4a3-657c-4887-b5b4-d38b472bcb56","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.641658Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:409a2e8af7a0b025cfcd2c1a596599f039568b289282e3d7ff1d25c1c3df6afa","observation_id":"460f554d-12f2-4b30-a58f-967521453e9d","resolution":{"observed_at":"2026-08-07T00:41:19.353618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.316428Z","title":"Introducing npm package provenance,","venue":null,"work_id":"3c651b00-1a27-4aa8-b274-ba27bcd99365","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.652926Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f2312060c9d9d2c585d2d361cf6fc95dc5d489ebff092febbfba62e4cf235f7f","observation_id":"6c340277-630c-483e-8fd4-c0a1ae15ad9f","resolution":{"observed_at":"2026-08-07T00:41:19.321296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.301363Z","title":"rc - npm package,","venue":null,"work_id":"70802dda-f3b6-4418-b463-c8582dc6cbe0","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.658069Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8ec2e7d19b672295dc81c15e5eeec8b2508c5e5a75633ac9d3ce36f1aa32b683","observation_id":"f43ba960-d51d-4c9c-9c2f-2d46da608ec6","resolution":{"observed_at":"2026-08-07T00:41:19.307145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.285245Z","title":"coa - npm package,","venue":null,"work_id":"caeb3fee-3c41-4335-89c9-c883a6971b1d","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.663477Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:88f6fded60cc1632eb803c3b3e158488483051b4f643cc9eccaed988e85bb850","observation_id":"83df5e8f-6cd0-4bf1-91cb-2f31480d49f0","resolution":{"observed_at":"2026-08-07T00:41:19.290423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.269159Z","title":"ua-parser-js - npm package,","venue":null,"work_id":"2e9bb74f-b61b-4ae1-81bd-dd93762a3f4c","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.668631Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f2176c825fbd1a570254e2fdf4323b2dbc955030be341f9490671174031d900d","observation_id":"04a2446c-9b37-4314-8260-0a166bce569f","resolution":{"observed_at":"2026-08-07T00:41:19.275173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.253647Z","title":"CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),","venue":null,"work_id":"7cf86e31-6acc-4130-89a3-9efaa849e1a4","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.673125Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:fef8f64dadf7bbd428a8b221e76b95fae6ac998219048d093141d72d300741e8","observation_id":"0d2f2250-1a1d-4c54-8964-4adfd96396c5","resolution":{"observed_at":"2026-08-07T00:41:19.258890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.236484Z","title":"CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),","venue":null,"work_id":"26f7498c-5c19-4b7b-a050-9bf2079778a3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.679392Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:4677fdaafb3949c7baeb0a6f73700412fe97bb38c4eaa12fbe5194829ab0e4a4","observation_id":"51c12b66-1093-46cf-9fb6-dcc75e9cb172","resolution":{"observed_at":"2026-08-07T00:41:19.242392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.219290Z","title":"CWE - CWE-94: Improper control of generation of code (’code injection’),","venue":null,"work_id":"6c54e7b9-ccd3-4a8d-9f48-91bf6c47973a","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.684025Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:96d91bc2e39d6672e71dc2304124eeba3d11f5bbf2820c2fb4546bda073c5efc","observation_id":"0b319214-79d8-4500-99f1-a6886b9b9115","resolution":{"observed_at":"2026-08-07T00:41:19.224971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.201404Z","title":"CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,","venue":null,"work_id":"40a2cd43-efcc-4a2c-bdb6-1b09a40c7a9a","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.688598Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c4efd35347ea9c11227fb922951e095dd7ada10e6ce97e9da8d1ac6881c6ec89","observation_id":"98f0c9b2-0988-486b-9f6e-46089db11c87","resolution":{"observed_at":"2026-08-07T00:41:19.207256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.180524Z","title":"CWE - CWE-122: Heap-based Buffer Overflow,","venue":null,"work_id":"d3979076-0211-40ed-af87-e64c4c686e29","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.693550Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c5b5c029b9a9dbc6dae03312a5008671b90640b20819e67d6c75cf2132a5fb56","observation_id":"dfcc63f4-7ac3-4653-92e5-0c25dc8599ba","resolution":{"observed_at":"2026-08-07T00:41:19.187726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.162582Z","title":"CWE - CWE-416: Use After Free,","venue":null,"work_id":"939ee74e-7c96-428e-84a0-a30206c0e504","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.698744Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e9633100d7aa7fef06174d3c15f683e7ef02d7e9afe0c4f4eef3925ee1224767","observation_id":"06281f84-9a0f-42fd-b97f-4b17d5cb156c","resolution":{"observed_at":"2026-08-07T00:41:19.168465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.144459Z","title":"CWE - CWE-787: Out-of-Bounds Write,","venue":null,"work_id":"862c1965-37ce-47be-b863-e7e62630b9a7","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.704072Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:401fb65bedb1a2f0aa6c7afff2344172aedd23d9cd18d9747db61550c1a63b23","observation_id":"10f4620b-10d3-4565-a5a8-2b963af0bf8e","resolution":{"observed_at":"2026-08-07T00:41:19.150007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.125811Z","title":"Range operator","venue":null,"work_id":"68174541-b054-4405-836d-3f02d8dbd1a1","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.709547Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0194ea2d8d9d60fbf021cbcc17dc983adcca17d10998d5613bcb4d09a515f9e7","observation_id":"716190b2-6695-442c-95e7-6479213f2e7c","resolution":{"observed_at":"2026-08-07T00:41:19.131632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.107018Z","title":"CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),","venue":null,"work_id":"f0267dfe-9fa4-44b2-889a-6a89c75d9a66","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.715609Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7dafb38cfc16b98e1de9838eed75f97f523a98ee19ac0bfb191d75100aaaff61","observation_id":"cb387af2-a3bf-40be-9b7e-3e21bdc120b6","resolution":{"observed_at":"2026-08-07T00:41:19.112327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.064975Z","title":"Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision","venue":null,"work_id":"2f36805a-972e-4533-8474-0566c918c17b","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.725559Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:fb051a16742d2226198e8bae4d7fadb490b47286ba82c8dbd7849fdfde956469","observation_id":"d8061490-4e54-4446-8a82-9c5360954fe8","resolution":{"observed_at":"2026-08-07T00:41:19.069894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.044653Z","title":"These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices","venue":null,"work_id":"cf541dbd-3555-4861-a376-d5343313e269","year":2000},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.730660Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d88082654bbe672ff5c12d40f9bd88e0263ada13fb277f3bb7ffaee31421582a","observation_id":"22160637-cf91-47b3-bada-4134ff7bac9d","resolution":{"observed_at":"2026-08-07T00:41:19.051532Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.022966Z","title":null,"venue":null,"work_id":"45033ceb-32e8-4ec8-a134-2083af4db85f","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.736392Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:90d41712323b8feac648faea5301293cd1c323a1b81a8df0501d420dc59738da","observation_id":"78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99","resolution":{"observed_at":"2026-08-07T00:41:19.030216Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.928193Z","title":"14 TABLE 4","venue":null,"work_id":"4308e844-8c16-48dc-87e1-0d0b7b7058fd","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.741692Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:4f4242d013dd2a60c20941c090a00b75f30c3faf2389a69df078ad9fea6817a0","observation_id":"16fe951f-63ff-4596-aacd-d74996544db0","resolution":{"observed_at":"2026-08-07T00:41:18.934575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.332020Z","title":null,"venue":null,"work_id":"d54149c7-d256-44e0-9b06-068ecffae361","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.647618Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1f599702f8bc058cba4233915b8cbca3a7422dd61991c41756e1c13591c1294a","observation_id":"0c704d7b-8c49-4ca6-b4d7-457b83206b5b","resolution":{"observed_at":"2026-08-07T00:41:19.337461Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.081421Z","title":"Appendix","venue":null,"work_id":"10efb686-f29a-4fbf-9ed8-b48f70fc50e9","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.720769Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e85af2ccd4f6d58178767618e4e2397ffd0da71fb01f54a174a0be0a62cd840a","observation_id":"4e69e5be-a829-457a-9041-796efe152917","resolution":{"observed_at":"2026-08-07T00:41:19.086835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T23:09:37.839849Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software"},"reference_resolution":{"displayed":80,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":4,"verified_exact":0,"verified_fuzzy":75},"total_outbound_references":80},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995."}