{"as_of":"2026-08-18T12:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a5bc3cc50998d92330b6f9fb14825bff6852012ddc34aaa8a4551f345deafc54","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T14:22:35.288542Z","state":"measured"},{"denominator":75,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":75,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.21417/citation-record","integrity":"/paper/2508.21417/integrity","json":"/paper/2508.21417/citation-record.json","paper":"/paper/2508.21417"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.878027Z","title":"Common Weakness Enumeration (CWE)","venue":null,"work_id":"8c2f9e17-2c33-4763-a7fa-f30effcf9a24","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:33.921400Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bec2371dc957f1bcbe954b148053d0177846d0b9921491ce81c8ae3d630d0fe9","observation_id":"f4875a52-7b45-4eea-87dd-f204d67af8cb","resolution":{"observed_at":"2026-08-05T14:22:38.931504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.726678Z","title":"Python Package Index (PyPI)","venue":null,"work_id":"1309ce0e-4c97-48b7-b1b4-5a85da6552d1","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.104565Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6a8ef69b4bc48f2a4520b2e647950aaa465fa4bf06ef0d6b346efa5008a50f97","observation_id":"9125aef2-be30-4c53-bb50-4fc1a5e21512","resolution":{"observed_at":"2026-08-05T14:22:38.811542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T14:22:34.246519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.246519Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2c816ed3842c139dfc6041656b2abf141305bdbb4d2ed87ac71341b9a59645f6","observation_id":"83bd2bca-4766-4aae-85e5-11ae3daa920d","resolution":{"observed_at":"2026-08-05T14:22:34.246519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.355513Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.355513Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d3fdf8c2ada52b36b22bcd89f0010dfb887778ba29334faa1c06602a7ed657f7","observation_id":"79fcf3c8-140e-4d56-9d33-b55a560c7a72","resolution":{"observed_at":"2026-08-05T14:22:34.355513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-08-15T21:55:47.604051Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-05T14:22:34.387171Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.387171Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2cb24a4a61114705cfaa99aebde3364034a8fc3b747b7abcba680436e4bb9b31","observation_id":"38ed1bcf-dde3-43fd-9064-3064bae508a0","resolution":{"observed_at":"2026-08-05T14:22:34.387171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.587572Z","title":null,"venue":null,"work_id":"937879eb-8bf4-4a2a-b285-734c89f84906","year":2000},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.544233Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4547fef72b380f656636dceb4f7f1df2ec3f76715e0b832bb74a725e4aca6048","observation_id":"da8c5f00-17ec-4932-846b-6d160d470d8c","resolution":{"observed_at":"2026-08-05T14:22:38.635956Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-08-09T21:25:20.369782Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-05T14:22:34.641602Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.641602Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:9291383ab398a73ae0ded9131ed97489c3c4bad12254735d1b7c8e92c6a6273e","observation_id":"6254b694-c558-46b0-ade5-8a3430a0d843","resolution":{"observed_at":"2026-08-05T14:22:34.641602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.432260Z","title":null,"venue":null,"work_id":"067bc55d-0949-4085-a533-41230181836c","year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.756619Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:125a552c163f239a20da1c2376bdd454fc663c55f5083d38f2487e9bfdc07564","observation_id":"dea88370-8b0d-40ea-ae02-acb36a3382ae","resolution":{"observed_at":"2026-08-05T14:22:38.485294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.782910Z","title":"Carver, Munawar Hafiz, Patrick Hilley, and Derek Janni","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.782910Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bac45125f3ee656327f6bfaddc17605642950de32995cd76fbd8e2b5566a5039","observation_id":"9b04f445-af03-49f3-91d4-a9fa92a12b4d","resolution":{"observed_at":"2026-08-05T14:22:34.782910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-05T14:22:34.791444Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.791444Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:299516eb3bcd2ca05322031eb1c6bbb6424b52cf03a4f7eebea9db18dbedff2b","observation_id":"2d9db67f-dd62-4c90-bfec-d35cd1b73a45","resolution":{"observed_at":"2026-08-05T14:22:34.791444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12712","last_updated":"2023-04-13T20:41:31Z","snapshot_observed_at":"2026-08-03T04:49:15.195814Z","submitted_at":"2023-03-22T16:51:28Z","title":"Sparks of Artificial General Intelligence: Early experiments with GPT-4","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12712","snapshot_observed_at":"2026-08-05T14:22:34.799840Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.799840Z"},"links":{"cited_paper":"/paper/2303.12712","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:178f3793d44f601d4ce96e5e587c6571487ece8efc385baf701b1f439199ed25","observation_id":"4c913649-4c6b-474c-aa6e-cff55dea4f67","resolution":{"observed_at":"2026-08-05T14:22:34.799840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.200498Z","title":null,"venue":null,"work_id":"2e1c255c-8726-47c8-922f-ec37e809567b","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.807051Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2d70eda78e84a30fa472bead0e8b24f6579fc9e4d577fe69432f5922ba5554bc","observation_id":"5ac09593-047f-4d14-afe5-5137acb71bbb","resolution":{"observed_at":"2026-08-05T14:22:38.249305Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.156935Z","title":null,"venue":null,"work_id":"7d18e28e-5805-4e6d-8978-9137963c464b","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.813452Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:fc0be02e40dbbee22d569fd1ac4644d0984b1bad54813ff31da98cf3570bf141","observation_id":"4ae173aa-6c69-4bcd-8c38-afd9d2632836","resolution":{"observed_at":"2026-08-05T14:22:38.175035Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.104771Z","title":null,"venue":null,"work_id":"f7654803-3bd2-4e66-ae3b-6472cbfa1ac9","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.818634Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4e1bbf0ade771535d5d30c6198df6d0bfb8ee0ec9685c1afdcb0ace4b4775a25","observation_id":"5754117d-9d1d-40c4-9fad-0d8f5df6f816","resolution":{"observed_at":"2026-08-05T14:22:38.123961Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15631","last_updated":"2025-05-18T06:57:37Z","snapshot_observed_at":"2026-08-16T13:07:33.851206Z","submitted_at":"2024-10-21T04:27:41Z","title":"Security of Language Models for Code: A Systematic Literature Review","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15631","snapshot_observed_at":"2026-08-05T14:22:34.827152Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.827152Z"},"links":{"cited_paper":"/paper/2410.15631","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ac2f951a9b254f390b160d2aa589eeff5538978ae85bebce242239c8482c6dc3","observation_id":"7aea44a9-1937-4438-8807-f220e0273175","resolution":{"observed_at":"2026-08-05T14:22:34.827152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.837126Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.837126Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8a8beac4cbc172ae45215e7b37c56f79c9b998cf447a624ece8e902899aa87c1","observation_id":"7838b89d-b274-4f77-914e-d42c144203e1","resolution":{"observed_at":"2026-08-05T14:22:34.837126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10664-021-09951-x","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":null,"venue":"Empirical Software Engineering","work_id":"6024e282-eef6-4933-8da1-c64ebc1ec8bd","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.843446Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:40abf8e2f283a4a14ce21ce7c8573ab6c5fa60b93256236a9109792e84c2da2a","observation_id":"8868af7f-a4b0-41a6-9461-d7444f8cdd53","resolution":{"observed_at":"2026-08-05T14:22:35.382603Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.849994Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.849994Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:690fc87a043e756a2f605bf701d52e3bd45cb5a6b4a5914cc21b96e3b387a17b","observation_id":"f0b02522-6f00-466a-8c96-0fd17376fc48","resolution":{"observed_at":"2026-08-05T14:22:34.849994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.017646Z","title":null,"venue":null,"work_id":"b4ba0aa7-cfda-4961-a54a-fc58ceeb562b","year":1993},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.856822Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f4fb00840b5aa5ee49c1c054dcd99ea3a3079ed8c160c84369c27cc9c647c3a6","observation_id":"a7560cc3-a502-45d4-81b8-682779c32f6d","resolution":{"observed_at":"2026-08-05T14:22:38.038535Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.956477Z","title":null,"venue":null,"work_id":"87bc866c-a9f5-404d-9533-3f04412c8e9f","year":2011},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.865835Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:7a3fe18ee58b28a52ba5d18c42740a0528ffad0da9840e39d72cc146061565e5","observation_id":"ad96a7dc-72ce-4246-9f27-84db5deaf578","resolution":{"observed_at":"2026-08-05T14:22:37.980588Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.907563Z","title":null,"venue":null,"work_id":"897783e5-cc8d-4c30-bcb4-bed4ad0e8d08","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.872632Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:58540c7c288d44851e56f7cb48fe084d2b317a94dc5ebcc39e64248a28ebb5ad","observation_id":"451ce81d-71b0-434b-af9d-23e70ab15550","resolution":{"observed_at":"2026-08-05T14:22:37.925462Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.29183","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:36.649336Z","title":null,"venue":null,"work_id":"f6fbe7dd-e7cb-44d5-9805-e3363ac8b0bf","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.878564Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:07c7832b5cd39791148a4e2389fe18b601dd4942dc8c8433d41e200efebb45ab","observation_id":"3cf75503-abb8-470a-9fb3-45271ad459e0","resolution":{"observed_at":"2026-08-05T14:22:36.661361Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.885727Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.885727Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:29bcdc9b92a5533f7683f1db39b2b6fb644463b20cdb17b046bc17a921c8022a","observation_id":"452d2ebc-7815-4ac5-89f0-69d128aaa897","resolution":{"observed_at":"2026-08-05T14:22:34.885727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.892446Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.892446Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:5dd4b51ff84f0e80f5cee19890c82617ae5214880110d03a345b4617448dd571","observation_id":"471111ac-eb34-49e5-9c80-c13c188b941f","resolution":{"observed_at":"2026-08-05T14:22:34.892446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08005","last_updated":"2023-05-13T21:01:14Z","snapshot_observed_at":"2026-08-16T15:33:20.399380Z","submitted_at":"2023-05-13T21:01:14Z","title":"Beyond the Safeguards: Exploring the Security Risks of ChatGPT","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08005","snapshot_observed_at":"2026-08-05T14:22:34.898784Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.898784Z"},"links":{"cited_paper":"/paper/2305.08005","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f046e50bf95f77a973a8c40805db2a2ed91e7427e58b1d9541889945973787c9","observation_id":"9e16eb67-4169-44e0-a2db-f80781ae060e","resolution":{"observed_at":"2026-08-05T14:22:34.898784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11415","last_updated":"2024-09-23T09:23:02Z","snapshot_observed_at":"2026-08-16T14:42:01.561077Z","submitted_at":"2023-11-19T20:22:05Z","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","version":2},"cited_work":{"arxiv_id":"2311.11415","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.11415","snapshot_observed_at":"2026-08-05T14:22:36.372977Z","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","venue":"cs.CR","work_id":"2d579bf4-58de-4c76-bff3-7dd8c4051244","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.907248Z"},"links":{"cited_paper":"/paper/2311.11415","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:06aa0bccfcfb2b4a8dfbe7434402388e56f572ae2d4f1d95ac3c89e9cb31952d","observation_id":"0c25cb81-0494-411f-844a-0b8c62591ade","resolution":{"observed_at":"2026-08-05T14:22:36.398294Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09283","last_updated":"2024-03-27T13:55:14Z","snapshot_observed_at":"2026-08-18T07:38:05.119659Z","submitted_at":"2024-02-14T16:14:03Z","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09283","snapshot_observed_at":"2026-08-05T14:22:34.913851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.913851Z"},"links":{"cited_paper":"/paper/2402.09283","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:5c6917849d9c1280e81fe80e20bc395cd53c7d8fc851d2d28b92c3378bdb473d","observation_id":"ddf34a5f-a9c9-4178-a38c-74dfd1bdc6f8","resolution":{"observed_at":"2026-08-05T14:22:34.913851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01139","last_updated":"2020-12-02T17:40:57Z","snapshot_observed_at":"2026-08-13T16:30:20.872238Z","submitted_at":"2020-02-04T06:10:18Z","title":"Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01139","snapshot_observed_at":"2026-08-05T14:22:34.921518Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.921518Z"},"links":{"cited_paper":"/paper/2002.01139","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:88a717a86dd10fee5070846844d54a06c7cfaeb318b172fa490522828b563906","observation_id":"9e7600a9-f38f-4298-8196-22b93cf3a4a5","resolution":{"observed_at":"2026-08-05T14:22:34.921518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.929396Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.929396Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:c7e93cda76f87845f9302b8695a8432e4f9d7903f2d1f5ad79888f5d234c8f47","observation_id":"e06e53f3-5471-4168-a27e-2ec69f94e6b9","resolution":{"observed_at":"2026-08-05T14:22:34.929396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.839097Z","title":null,"venue":null,"work_id":"eef40f4d-6b23-4bdf-b44e-01f5a00af994","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.936490Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f4034f91f97601848955d658aced08b179770351de6f803c646deb42776bf63b","observation_id":"97e1e6fe-145c-4741-a42c-4eeb4b78520c","resolution":{"observed_at":"2026-08-05T14:22:37.858409Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.808944Z","title":null,"venue":null,"work_id":"491cfd38-9ccd-4217-85b4-65f6ef9d9c66","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.944264Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ddce7d4d6c01a4d7a9790b3cc675c589c1438cc58aa3528a4f2efb98f6afb028","observation_id":"4d6b3b27-c5ab-470c-8e64-c4e542ed0fed","resolution":{"observed_at":"2026-08-05T14:22:37.821035Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.771319Z","title":null,"venue":null,"work_id":"8c7f3caa-5a47-4c04-b45f-33a7803a68d8","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.951171Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:785c44710e43c15a95cc3b013a02f1b3ee2f0e52aba29abc5cf5c1f7fd782173","observation_id":"2aebcf10-c3a4-44a0-a15f-03c44ac8ef17","resolution":{"observed_at":"2026-08-05T14:22:37.782630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.742108Z","title":null,"venue":null,"work_id":"dd755341-813a-4fa4-b259-29aa4a0c2ce9","year":2009},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.957968Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d318ab4836e9f27ff5dc32d437faea21dea469929bab4495b42e925a769999f6","observation_id":"c6879fa0-dd3e-40f7-8bf6-6a30d6e34016","resolution":{"observed_at":"2026-08-05T14:22:37.750245Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.717205Z","title":null,"venue":null,"work_id":"cc2a417c-18c2-4ef8-8ea8-3d8953f586f3","year":2019},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.969573Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bc02a366d8fce7647db369460d7025d0330c3c331da4b02c8d5b481f37fb0b69","observation_id":"9d99f4a3-963f-4054-b1f4-1ae2c0777446","resolution":{"observed_at":"2026-08-05T14:22:37.725756Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.692585Z","title":null,"venue":null,"work_id":"e68546a0-8bfe-4a41-8933-0ed19e70da53","year":1912},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.982812Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:598f3ee82328ac72969b90a79f6cabf5a77a0f0f2cca9a8760c383386e924a54","observation_id":"b6cf88f4-fecf-420d-aee4-41ee2e0ea9da","resolution":{"observed_at":"2026-08-05T14:22:37.700145Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.672823Z","title":null,"venue":null,"work_id":"4a985acc-304d-4fa3-8bf2-47473c651e03","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.990856Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4bb5e2a03492b33d34d491f470c30a03663351edb563ff0b4d192b32db784000","observation_id":"5add2129-a16f-492e-b77f-918dee0961ca","resolution":{"observed_at":"2026-08-05T14:22:37.678350Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-14T09:56:00.692687Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-08-05T14:22:34.998918Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.998918Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:424b21bf047ceafc76e4c2a3d23e07c6286ad717a7d12b37e20bed7112f9e13e","observation_id":"38b4640a-2e38-4d20-8941-3b3391ee1ab6","resolution":{"observed_at":"2026-08-05T14:22:34.998918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.649738Z","title":null,"venue":null,"work_id":"4a288ca6-ebcf-4568-bac6-356a13becefa","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.006721Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:55dcb457ad2a7b1248df2a30e1e2ee560aa07a9a6e5abd8b31844b45dfd2b3fa","observation_id":"93b06833-9d3b-4a4a-8189-e8aa38e6fff6","resolution":{"observed_at":"2026-08-05T14:22:37.655899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.627901Z","title":null,"venue":null,"work_id":"292260e5-13f2-496e-89e6-096127c195c7","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.013296Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:638395f0ea8a08f15be7b7e7de481bb58dbbcb6cc2551487ab8305141689bddb","observation_id":"00c841a0-61a1-4df3-8b1f-bc253e192ac4","resolution":{"observed_at":"2026-08-05T14:22:37.633806Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01604","last_updated":"2024-11-03T15:20:21Z","snapshot_observed_at":"2026-08-16T13:03:24.857747Z","submitted_at":"2024-11-03T15:20:21Z","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01604","snapshot_observed_at":"2026-08-05T14:22:35.020047Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.020047Z"},"links":{"cited_paper":"/paper/2411.01604","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6362a93d573f1e4eda6e8c37115fe29fadcc04e9c5d6a7c82317b44159e9621b","observation_id":"c4ecd9d8-f779-4ac5-98bf-0502fc84f25b","resolution":{"observed_at":"2026-08-05T14:22:35.020047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21218","last_updated":"2025-06-25T09:01:38Z","snapshot_observed_at":"2026-08-16T13:05:18.048762Z","submitted_at":"2024-10-28T17:02:12Z","title":"Lifting the Veil on Composition, Risks, and Mitigations of the Large Language Model Supply Chain","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21218","snapshot_observed_at":"2026-08-05T14:22:35.036578Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.036578Z"},"links":{"cited_paper":"/paper/2410.21218","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:a9c2b74cde702229a4d86665a7b2e71341170a189d5649ff86a2af4c5fbc9bf0","observation_id":"5e20c8c8-911f-4ba2-970b-00be330bbbdc","resolution":{"observed_at":"2026-08-05T14:22:35.036578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.605974Z","title":null,"venue":null,"work_id":"5c88d702-9ab9-407d-afbb-79799d827570","year":2022},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.047079Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:17c49af1dfb007eacf60368014dd555fa86541f2c2d9593cab58557d5c9650c6","observation_id":"824260a6-39c4-4b9e-a922-0400d3b8debd","resolution":{"observed_at":"2026-08-05T14:22:37.613121Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.055123Z","title":null,"venue":null,"work_id":null,"year":1958},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.055123Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:309cd8a0059fd8f6808191ef5a68800368c0d1a5008b58b389ec3e0f2d1dd2d8","observation_id":"2f89a841-29ea-4201-a40d-91c6341dd70e","resolution":{"observed_at":"2026-08-05T14:22:35.055123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.575547Z","title":null,"venue":null,"work_id":"520618c5-af18-4d4a-9b29-14b3e1da874c","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.063813Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:648ede60452231762bf88e85f5708f23ba4e7f0a9a15ec7ab8e26c3d8cd5b4d9","observation_id":"f611e6f8-b73f-405c-a8d3-6dd0f4712e1e","resolution":{"observed_at":"2026-08-05T14:22:37.585206Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.549105Z","title":null,"venue":null,"work_id":"c6512afd-114c-430e-803c-be08e388a0ff","year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.071767Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:310335036a32c7e1d6f47d87691241f7504e8ed6e48ecd82cffae70fd045c840","observation_id":"ace03ee4-dffb-4c2b-8678-0d00665437d0","resolution":{"observed_at":"2026-08-05T14:22:37.557823Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08688","last_updated":"2024-06-12T23:04:13Z","snapshot_observed_at":"2026-08-17T18:47:06.321642Z","submitted_at":"2024-06-12T23:04:13Z","title":"On Security Weaknesses and Vulnerabilities in Deep Learning Systems","version":1},"cited_work":{"arxiv_id":"2406.08688","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.08688","snapshot_observed_at":"2026-08-05T14:22:35.952336Z","title":"On Security Weaknesses and Vulnerabilities in Deep Learning Systems","venue":"cs.SE","work_id":"c0984c61-c74b-4870-918d-53e64bcf9bf8","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.078361Z"},"links":{"cited_paper":"/paper/2406.08688","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:85fa0eff6faa71e41b6af8fc741a12873d4895a98e3304fbd4e8d0146fc28d5a","observation_id":"c429e11e-f80f-4ea8-b1e3-95a2a099073b","resolution":{"observed_at":"2026-08-05T14:22:35.969263Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.526899Z","title":null,"venue":null,"work_id":"98d103cc-9126-4a19-bcb4-c08d5a940c66","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.083569Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:0bde25844ce7f0ed560878b8ccf80259a6be1b19ac87040e998de93e635427dd","observation_id":"47b24b5f-ba80-402c-8484-dc4ccc5f089c","resolution":{"observed_at":"2026-08-05T14:22:37.533716Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.502836Z","title":null,"venue":null,"work_id":"b64eef9e-a232-48a2-ae2b-60ec24bc21be","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.092267Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:1bb7e5122c81c767f909099918b73a85c6676c43d451e8d9862ffb9f3af4aaab","observation_id":"63dc20fd-ad31-404b-b84c-b90a3a9e2436","resolution":{"observed_at":"2026-08-05T14:22:37.512530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.100425Z","title":null,"venue":null,"work_id":null,"year":1947},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.100425Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:899211ef7f20a39a53838bd28e0f23d246d5153182947468b337e33dc6bb9a0b","observation_id":"635d2248-6d3a-42f0-8a6b-f974cf9e8041","resolution":{"observed_at":"2026-08-05T14:22:35.100425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.480877Z","title":null,"venue":null,"work_id":"16e1b543-2ab5-445a-bf01-ddfe20b4ceef","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.106569Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:334ab864ebc7de1a6de87ff7f18614e94bebdd32881f78b173cb8e95cec519dc","observation_id":"ed6bb5ba-d9b3-42b5-9fb4-3ba5fea693c6","resolution":{"observed_at":"2026-08-05T14:22:37.488241Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.449559Z","title":null,"venue":null,"work_id":"d7d66355-2015-49aa-870d-b9f110b20fee","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.113310Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:b291f85f0f68272b98237df3428c1d8c53312fef36c00bbe87846acd087cfc17","observation_id":"55875464-fd29-4a5e-b4bd-73288edde31f","resolution":{"observed_at":"2026-08-05T14:22:37.459472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.121092Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.121092Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ab36dc75e176d796b7a0510927cb8f330d72ef5b5c002c026ec9eb883515d10c","observation_id":"0fa35ce0-3d18-4375-a048-7af30358ee54","resolution":{"observed_at":"2026-08-05T14:22:35.121092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.130724Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.130724Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3d7f7ffe1d0fb0c88801aeb641bd2f08bd7e428763d3c23dda9f2922f41c8ea3","observation_id":"0589750b-09a1-48cc-8999-e31a779604ca","resolution":{"observed_at":"2026-08-05T14:22:35.130724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.139278Z","title":null,"venue":null,"work_id":null,"year":1900},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.139278Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:098cdcc83c387c88246acd6b6a0a84e02c50b79b0000d20c360f7935d168bba4","observation_id":"a42eb0c3-9017-43e5-baa5-6ae221da067b","resolution":{"observed_at":"2026-08-05T14:22:35.139278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.152041Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.152041Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:9e34bea801f6773d0235bcdd5d85991c708cabc5f6c52484c5f0bdb70ba24157","observation_id":"583a284c-215a-4fc7-8f88-7f461b4c6629","resolution":{"observed_at":"2026-08-05T14:22:35.152041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.377682Z","title":null,"venue":null,"work_id":"62beda2e-018f-4fea-9175-b1d33af8613a","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.159670Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ce8642e82ab1869072a383b2bb6d18e3acc13003b3299ac1ca6df929d6f6aebc","observation_id":"cb5e78d3-c496-411e-aa04-a4d7f7320208","resolution":{"observed_at":"2026-08-05T14:22:37.384766Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.346937Z","title":null,"venue":null,"work_id":"df71f43c-4e6d-421d-9325-9aa50748d777","year":2005},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.165548Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:80fa280fb892655b81693b4f81ec42e56a7cae0e07be266a995a5176980ff420","observation_id":"9e22b64a-a6c9-4175-a602-e2c135363801","resolution":{"observed_at":"2026-08-05T14:22:37.355485Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.171599Z","title":"Shapiro and Martin B","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.171599Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ddfb46fe748b4307a6aca58327362bca366cec8a3d1488f5a91ebbb26a7eb9c1","observation_id":"1b7f912c-f975-4d07-a4f1-d8a3323f69d0","resolution":{"observed_at":"2026-08-05T14:22:35.171599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-08-16T14:51:35.122183Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-05T14:22:35.177263Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.177263Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:a010a591dff08c4c4478b4715b58a65af2146269c67d90a2f7a5c1666e0987c2","observation_id":"b68e77f6-7fa0-49d6-b4a4-7614bad807bc","resolution":{"observed_at":"2026-08-05T14:22:35.177263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.309112Z","title":null,"venue":null,"work_id":"9e55e097-748a-4ee7-a0c0-fce9413e77f4","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.186730Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2a88611797fd6cadd3faf62b0a005f177904b7a161165bff7ade6559575f5e80","observation_id":"260757d9-3c55-4c62-9ec4-7497d19c8db8","resolution":{"observed_at":"2026-08-05T14:22:37.324688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.264521Z","title":null,"venue":null,"work_id":"21472c43-2e02-4c72-8194-9a32a66b9376","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.194536Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d9f70c445616a84be5057976a634ead0985f82c46e097e5a160966fd9eb779a7","observation_id":"71d2d690-e084-4bb8-9610-76493c1db655","resolution":{"observed_at":"2026-08-05T14:22:37.271343Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.232192Z","title":null,"venue":null,"work_id":"59d88f90-982d-4939-96b0-71dc327b0267","year":1961},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.200707Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bab6d41446fab9551926c5bdcaebce33bad4297166039a0e94f353b732135d84","observation_id":"53837031-1f74-4af4-8ad6-d9a10dd27036","resolution":{"observed_at":"2026-08-05T14:22:37.240738Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.191355Z","title":null,"venue":null,"work_id":"8fbf3f4c-3a0c-4d50-a872-cffc68746b69","year":2022},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.205951Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8e5c702cdb0389c0d0187dca5a15b3fcf597c1024e044a0945c89ab3ce73a54a","observation_id":"c7804708-7ffc-47d6-ae88-793a1923b084","resolution":{"observed_at":"2026-08-05T14:22:37.198320Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-05T14:22:35.211159Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.211159Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d11a9ef9b222a073c6cd8d0adb1822ad37c2020ea9f1083265ef84f5c7fbc87b","observation_id":"f4a498ec-a83a-481c-b25d-f7a751e15a17","resolution":{"observed_at":"2026-08-05T14:22:35.211159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.218301Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.218301Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:578c84d41301f703df28eef7b1ca1e278fc44a1be10ec7885f9beb1518b77ffd","observation_id":"75cc4572-06d3-4a38-867b-6f1898d0d411","resolution":{"observed_at":"2026-08-05T14:22:35.218301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.141958Z","title":null,"venue":null,"work_id":"47bf78eb-fa51-4680-9852-32ff66f8618f","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.225458Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:0e572ec3c38d21fde9008fcc64e5059c253e21abe110d8873354aedf0d54f315","observation_id":"aabfdd36-75b3-41d5-8139-6816531abb1b","resolution":{"observed_at":"2026-08-05T14:22:37.149887Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12736","last_updated":"2024-11-26T13:35:05Z","snapshot_observed_at":"2026-08-18T09:53:59.273626Z","submitted_at":"2024-04-19T09:29:53Z","title":"Large Language Model Supply Chain: A Research Agenda","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12736","snapshot_observed_at":"2026-08-05T14:22:35.236922Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.236922Z"},"links":{"cited_paper":"/paper/2404.12736","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:fd67cead9e59c4805d4a41125a430b422639fccc480737ac1015e0c9009e4ef0","observation_id":"6ed0373c-8829-4ee9-af58-d07dbd8f5f32","resolution":{"observed_at":"2026-08-05T14:22:35.236922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.243738Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.243738Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:74fa81ea0037485b55f904a6c476f5991d0c826b167a9be88db40675a0001def","observation_id":"3aaca814-df29-417f-82e9-c21b9fe82b77","resolution":{"observed_at":"2026-08-05T14:22:35.243738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.079664Z","title":null,"venue":null,"work_id":"b5516cac-8ace-41ab-8946-282ee4a117d7","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.258942Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:fdb59c3beeb1a6049055018c10fde6533b138183f210fbb48e13156c9dd93cea","observation_id":"95474461-0b4e-47b3-868b-793929400d95","resolution":{"observed_at":"2026-08-05T14:22:37.088363Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.266023Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.266023Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d75cc36b663c39b0d577b35328e1aa375972a0314e9548570558d952c92fbd89","observation_id":"fece3f9a-99d0-48a4-babf-0dae0577131e","resolution":{"observed_at":"2026-08-05T14:22:35.266023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.023601Z","title":null,"venue":null,"work_id":"65360fc1-70d9-4368-a71f-525d9fd918c9","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.283449Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:9f9c083693f71c20254ecc97aa4e869f92f35576b27506641c8e59769a869b5b","observation_id":"a8e28cc1-c928-48d3-b11a-b4e55714e62c","resolution":{"observed_at":"2026-08-05T14:22:37.033182Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6237.31177","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.492885Z","title":null,"venue":null,"work_id":"0fc72331-1ad3-4d58-bae6-3edafbedd1b2","year":2017},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.288542Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:c1eff37836e6bd1281655fcecb9f837c738303a00f8e4f2ee68b5ca08d3454e1","observation_id":"92e321b3-68dd-4c20-9046-ef831a11342f","resolution":{"observed_at":"2026-08-05T14:22:35.508260Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.307817Z","title":"Canadian journal of statistics 27, 1 (1999), 3–23","venue":null,"work_id":"85330caf-aca6-4cbc-aaa5-7abbf6acb556","year":1999},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":1999,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.776466Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:01283c118ad40ed0a0af3fcd7baa0b1e8cb4b57e553ee86f801697c168d91640","observation_id":"ebaa1122-d467-4003-9bec-9f54f3dcebaf","resolution":{"observed_at":"2026-08-05T14:22:38.364185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17564","last_updated":"2023-12-21T06:21:11Z","snapshot_observed_at":"2026-08-14T12:54:48.492396Z","submitted_at":"2023-03-30T17:30:36Z","title":"BloombergGPT: A Large Language Model for Finance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17564","snapshot_observed_at":"2026-08-05T14:22:35.249302Z","title":"arXiv preprint arXiv:2303.17564 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.249302Z"},"links":{"cited_paper":"/paper/2303.17564","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:de3ac52f382fedc905c47d5a2fdc4575a7a590a0bce7eba86b30a1d11f1f3fc5","observation_id":"c4455567-e132-4b2e-9138-ea2ff0096265","resolution":{"observed_at":"2026-08-05T14:22:35.249302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.07506","last_updated":"2024-03-12T10:43:26Z","snapshot_observed_at":"2026-08-16T14:10:38.024979Z","submitted_at":"2024-03-12T10:43:26Z","title":"Robustness, Security, Privacy, Explainability, Efficiency, and Usability of Large Language Models for Code","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.07506","snapshot_observed_at":"2026-08-05T14:22:35.277775Z","title":"arXiv preprint arXiv:2403.07506 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.277775Z"},"links":{"cited_paper":"/paper/2403.07506","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3fb7c661a691239190881be5bd1d38b0f60c971504e1a89ad2eba8363a323f44","observation_id":"5f37db52-898f-4b15-9cb3-45d06a815f3a","resolution":{"observed_at":"2026-08-05T14:22:35.277775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T13:08:47.585517Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":66,"verified_exact":3,"verified_fuzzy":3},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 0 inbound Pith citation observations for arXiv:2508.21417."}