{"as_of":"2026-08-09T20:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:172176550f70705c3f273e2dc939f719f4241dbe4baa2749be5ab4afe0cdd824","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T11:18:18.463036Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2510.08609/citation-record","integrity":"/paper/2510.08609/integrity","json":"/paper/2510.08609/citation-record.json","paper":"/paper/2510.08609"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:11.437514Z","title":"Dependency Versioning in the Wild,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:11.437514Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:02e738f3d83e9596efac9b76fbea179a49ebb0399800756897254df802ed380f","observation_id":"8c24e113-407e-48e0-b5b3-db1dfcf8f706","resolution":{"observed_at":"2026-08-04T11:18:11.437514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:11.527344Z","title":"Dependency Smells in JavaScript Projects,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:11.527344Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:0fcae9db98bbb58db5aff68626bda0bc94ad769e43da1010a7dba51b67677a23","observation_id":"1a52a75d-1a45-4595-8a92-b11800d22ff4","resolution":{"observed_at":"2026-08-04T11:18:11.527344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:11.697764Z","title":"A formal framework for measuring technical lag in component repositories — and its application to npm,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:11.697764Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:db48851d87f99ed78563fced84a770ca1f33cd7e974a88e57548b3ff0507ba74","observation_id":"6b908b70-11ab-4dca-ba78-ab2a7b908f6d","resolution":{"observed_at":"2026-08-04T11:18:11.697764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:11.842259Z","title":"When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:11.842259Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:54463600653f64e33b348d65c05b9f105796aa0bfac2c82eec5dfd805c8d3e99","observation_id":"fc651949-0c25-4224-94f8-aad901131c73","resolution":{"observed_at":"2026-08-04T11:18:11.842259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:11.968570Z","title":"When and How to Make Breaking Changes: Policies and Practices in 18 Open Source Software Ecosystems,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:11.968570Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:a51e4cf336dcc2b056070657888cd49cbf0db96bb8de42a7696034049897dfab","observation_id":"6cd0eeba-42e4-44f4-b592-eefd11ac84b8","resolution":{"observed_at":"2026-08-04T11:18:11.968570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:12.187090Z","title":"Semantic versioning and impact of breaking changes in the Maven repository,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.187090Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:0f5cb053faa67ff8ac693e5a279c87a55959db3e110ed5e5afa3fb70951b6a4e","observation_id":"e40916bb-e191-4d67-a2ae-020491f9231d","resolution":{"observed_at":"2026-08-04T11:18:12.187090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:12.344365Z","title":"Semantic Versioning versus Breaking Changes: A Study of the Maven Repository,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.344365Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:7121f6de9f8b9d6488d37ea9db8b1f01cabaa704be36cad68d5524a28457944b","observation_id":"17274220-7121-41d5-ab17-0966fec43b2a","resolution":{"observed_at":"2026-08-04T11:18:12.344365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.04008","last_updated":"2022-04-19T19:02:15Z","snapshot_observed_at":"2026-08-01T16:00:11.100562Z","submitted_at":"2022-04-08T11:37:24Z","title":"Taxonomy of Attacks on Open-Source Software Supply Chains","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.04008","snapshot_observed_at":"2026-08-04T11:18:12.481191Z","title":"SoK: Taxonomy of Attacks on Open-Source Software Supply Chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.481191Z"},"links":{"cited_paper":"/paper/2204.04008","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:3e31d5caa1db425035237304b308e13a565d381c6bfd1122ef0308b31346c906","observation_id":"b3c2752a-5338-4cfa-abd6-2cc8564517cb","resolution":{"observed_at":"2026-08-04T11:18:12.481191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:12.613746Z","title":"OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.613746Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:3b5e58d43a5007217d5b6e72d04287e824e97c736921ddb9fa8aff11f337b2ce","observation_id":"b04c75f8-2bb6-4596-9b86-8866ff680bdf","resolution":{"observed_at":"2026-08-04T11:18:12.613746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:12.798233Z","title":"OSSF Scorecard: Build better security habits, one test at a time,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.798233Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:a63017caacdade85866aab50fa538291773a63e702fd8ad23d03f8d78af1811d","observation_id":"408a6895-981c-45a6-8583-dd0cc08620b2","resolution":{"observed_at":"2026-08-04T11:18:12.798233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.06662","last_updated":"2025-02-10T16:50:48Z","snapshot_observed_at":"2026-08-08T14:42:59.061613Z","submitted_at":"2025-02-10T16:50:48Z","title":"Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.06662","snapshot_observed_at":"2026-08-04T11:18:12.942538Z","title":"Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:12.942538Z"},"links":{"cited_paper":"/paper/2502.06662","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:668c77718d569104fca6942e7ba02e24fd1d37dc4c946d2e4f349f2f5cf623f7","observation_id":"1a97e9f0-a892-46fd-a680-b3a92a6956d3","resolution":{"observed_at":"2026-08-04T11:18:12.942538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.5281/zenodo.15559007","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Replication Package,","venue":"Zenodo (CERN European Organization for Nuclear Research)","work_id":"364d0c6a-0837-43be-b2b3-c6ba6a1a37c0","year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.062339Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:677bfe87fafcf3e51c7ebd14c14f862660093f6545249923fc332840801abf6e","observation_id":"399dfb81-ab85-440a-9a4c-5152a019dc9a","resolution":{"observed_at":"2026-08-04T11:18:25.176685Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:13.278064Z","title":"What is an Open Source Package,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.278064Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:6dc30b93b2880c62d13e1750a159f40311413c02ceb0249bf882cacf38232455","observation_id":"d83ebe03-440c-4439-8cd9-e45d685053c2","resolution":{"observed_at":"2026-08-04T11:18:13.278064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:13.473710Z","title":"Open Source Insights: Understand your dependencies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.473710Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:247b68a92cd38daa84bef49b003f9b1a93135251b376dc6eec3848f4bacaad17","observation_id":"ca3f6741-c04d-40e8-8900-1b0426610c26","resolution":{"observed_at":"2026-08-04T11:18:13.473710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:13.634780Z","title":"Understanding vulnerabilities in software supply chains,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.634780Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:fb1ce8bfb87122603397b9c9195eb30f7133e0ace64e4eccb02d8a40a442158a","observation_id":"239795aa-1718-41f0-9585-294816af30d7","resolution":{"observed_at":"2026-08-04T11:18:13.634780Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:13.810217Z","title":"Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.810217Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:a321ef9e9d9f54d7062f6c2b9db3d2fa6570b7509558192e7b0747bc95f9928d","observation_id":"25bab9e6-706b-413e-924d-f24601d74565","resolution":{"observed_at":"2026-08-04T11:18:13.810217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.17939","last_updated":"2025-05-21T14:20:25Z","snapshot_observed_at":"2026-07-06T18:21:09.808086Z","submitted_at":"2024-05-28T08:04:01Z","title":"Detecting and removing bloated dependencies in CommonJS packages","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.17939","snapshot_observed_at":"2026-08-04T11:18:13.976984Z","title":"Detecting and removing bloated dependencies in CommonJS packages,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:13.976984Z"},"links":{"cited_paper":"/paper/2405.17939","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:a66172427cfab674a8df13f268cb14d072fb80c1c84cea0d3a01a7e775f6ff8c","observation_id":"9cd0a4b6-d8d2-4e36-8702-a23c4c121008","resolution":{"observed_at":"2026-08-04T11:18:13.976984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20455","last_updated":"2024-10-22T15:41:22Z","snapshot_observed_at":"2026-08-09T19:48:27.634310Z","submitted_at":"2024-05-30T20:05:44Z","title":"DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20455","snapshot_observed_at":"2026-08-04T11:18:14.102744Z","title":"DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.102744Z"},"links":{"cited_paper":"/paper/2405.20455","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:b4e37d1c7d199b58dbc5bdc70c2ccc003152cc93aa55a30612ba65ce442bafae","observation_id":"28af5cec-451f-4b49-9dca-112cf8e74ef3","resolution":{"observed_at":"2026-08-04T11:18:14.102744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.235457Z","title":"MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.235457Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:c1f732d75526016d428448dec4475cf50c8880b6380c9a6f590922194e67131b","observation_id":"cb706859-3ffd-46d6-b104-f7a3cb9633f0","resolution":{"observed_at":"2026-08-04T11:18:14.235457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.411465Z","title":"OSV .dev : A distributed vulnerability database for open source,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.411465Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:9ac739a12e95750771eeb3f4d670a6bdc0d40ba0e7793de524775202ce37f581","observation_id":"9a5842d0-3026-4044-8ac1-931711f16017","resolution":{"observed_at":"2026-08-04T11:18:14.411465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.574484Z","title":"GitHub Advisory Database,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.574484Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:436bf80e2a6fe4d7fb80403802b3f20671324cd27c8cdc5dfdc522c0556673c4","observation_id":"1d18f3bb-88c7-4b8c-8acb-4c892a944f2e","resolution":{"observed_at":"2026-08-04T11:18:14.574484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.695838Z","title":"OSV: Current data sources,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.695838Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:f5d6b79e8be4147fb6cc20ad9afabf06349b6f0f9cb0f6eb219c8a402d8491e0","observation_id":"8122070a-e1a0-4709-91d0-f782e877b33b","resolution":{"observed_at":"2026-08-04T11:18:14.695838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.831180Z","title":"Self-Admitted Library Migrations in Java, JavaScript, and Python Packaging Ecosystems: A Comparative Study,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.831180Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:3370777216d726072ab18e785cf958f808a2333c568b7c93b382ae860fc6ac15","observation_id":"10b734e4-476d-4a53-857b-840f0c69f368","resolution":{"observed_at":"2026-08-04T11:18:14.831180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.908970Z","title":"Towards Better Dependency Management: A First Look at Dependency Smells in Python Projects,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.908970Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:f778a50b129435214fdc66ff1c52ff8763bd2f4b53c72ebbbf73e8731144cdef","observation_id":"758bdbe2-4684-4417-88ba-b327826491a0","resolution":{"observed_at":"2026-08-04T11:18:14.908970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:14.991053Z","title":"MigrationAdvisor: Recommending Library Migrations from Large-Scale Open-Source Data,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:14.991053Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:354a7dc1e9062bc472ef28f37ce164ea0f47b5b8dbe1b8071a6b1d9c381b7beb","observation_id":"8b676e68-56af-4944-9b62-4d0fc14286f3","resolution":{"observed_at":"2026-08-04T11:18:14.991053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1002/smr.2265","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Investigating diversity and impact of the popularity metrics for ranking software packages,","venue":"Journal of Software Evolution and Process","work_id":"e6bea032-3038-4be9-8c78-826aeb6ac382","year":2020},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.096436Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:08d9dc9d08e981385ccb8d7a530eb5479425db676e6dc934b3e8f5b221be286b","observation_id":"319800a0-c51b-4b38-a2b9-293ecbdbe6c4","resolution":{"observed_at":"2026-08-04T11:18:25.023774Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10664-023-10317-8","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Using the uniqueness of global identifiers to determine the provenance of Python software source code,","venue":"Empirical Software Engineering","work_id":"17fccedb-1e1d-4010-9f53-9c04f11fc321","year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.173428Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:30b945bc5ef27e952e207db91d1a998f541786e47423295de1ec77e00a6d8ae5","observation_id":"c3b4721d-a5f3-4598-a0d5-a3d42df911cb","resolution":{"observed_at":"2026-08-04T11:18:24.905457Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.270177Z","title":"Understanding the Response to Open-Source Dependency Abandon- ment in the npm Ecosystem,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.270177Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:565c062e0252c14068349a2d9a370d3050ff9b14022d4011b99938b985f18874","observation_id":"7e7a1fa5-39cc-4323-8ae3-724026cf4508","resolution":{"observed_at":"2026-08-04T11:18:15.270177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.361037Z","title":"Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.361037Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:119ba4773af5cec76f87e2cf4d7f1343ed6f1e2d8c12009a0c0b39e86a20a4e1","observation_id":"a0d36c96-2155-4b1a-a88b-a21ea7a946b5","resolution":{"observed_at":"2026-08-04T11:18:15.361037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.429756Z","title":"No Vulnerability Data, No Problem: Towards Predicting Mean Time To Remediate In Open Source Software Dependencies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.429756Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:6235eb34ebe37bcb7756025690674b86a4a8b3c1d6ff6168571276ef84a7c3e2","observation_id":"4d499836-2095-46e7-8aa3-aa90f1d375d6","resolution":{"observed_at":"2026-08-04T11:18:15.429756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.537599Z","title":"Why modern open source projects fail,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.537599Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:fc914fd7865abe5521924428337fe85693e4cbfcd4e01e941158fea529716fca","observation_id":"b3c99a6f-4410-46a2-9c39-9402343bca34","resolution":{"observed_at":"2026-08-04T11:18:15.537599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.648208Z","title":"A Large Scale Analysis of Semantic Versioning in NPM,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.648208Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:0b0abe08927f12eb41b0e8be5726299e9c319d42e68ddf20601ee0e72ad05f41","observation_id":"eaae59ce-7417-4de1-a969-2fc846ea6d64","resolution":{"observed_at":"2026-08-04T11:18:15.648208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.739112Z","title":"Survival analysis for the duration of software projects,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.739112Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:89492b09176b92f1bc486f42bbd43b8677a3bfb1e0ef0ae0d4926bde151c11f4","observation_id":"db6e969b-a7cd-443c-a068-1a79664ec82b","resolution":{"observed_at":"2026-08-04T11:18:15.739112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.844872Z","title":"Survival analysis on the duration of open source projects,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.844872Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:ebd510f8939f3c75a0f9444052be6afb98be6be0c8a7f97606b7b16585770387","observation_id":"3d24df1d-690c-407a-a7f9-ff9a012916ea","resolution":{"observed_at":"2026-08-04T11:18:15.844872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:15.925171Z","title":"Application of biostatistics in dental public health,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:15.925171Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:977a56ca77a2b9fb61eb7ffa5cb6a2418bcf30263070760e6f2c4094396321e9","observation_id":"48093dbd-f13d-4a09-873b-aaf6167a26cd","resolution":{"observed_at":"2026-08-04T11:18:15.925171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.023868Z","title":"Statistics review 12: survival analysis,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.023868Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:8d1780181888c64b086a7b61f5474b03f8a3fed4c073b7072fa28262ceb21fe7","observation_id":"65cea48c-36e5-4a02-a6c6-b34cdc18defe","resolution":{"observed_at":"2026-08-04T11:18:16.023868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.121952Z","title":"Concepts in cancer survival analysis: Research questions, data, and models,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.121952Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:24525073c5725775ceb021d4dc03a685d045ccdbf0dfeacdba3136e133882ab2","observation_id":"a55534f5-7214-498c-b220-5aa8657333ca","resolution":{"observed_at":"2026-08-04T11:18:16.121952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.202968Z","title":"lifelines: survival analysis in python,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.202968Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:e25facfe3cb3f3d35f19a0c3cc2135512fcd31cdb122dce8b468b35c5497d97c","observation_id":"09e95dd2-e6b8-48b7-b0c7-47ebf567b826","resolution":{"observed_at":"2026-08-04T11:18:16.202968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.296780Z","title":"Time-varying covariates and coefficients in cox regression models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.296780Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:40c009c34daf2f73f9155d44caced19b9167f7876136d9b432c241c741af0040","observation_id":"ff1abc6e-1872-4439-83cb-154b38ced45f","resolution":{"observed_at":"2026-08-04T11:18:16.296780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.369554Z","title":"Semantic Versioning 2.0,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.369554Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:6f475234d522d77f61dbef70a39989d411114210aaac0a7d4ae6086663240b29","observation_id":"834d3205-498d-4ca2-9635-741da0bc4fed","resolution":{"observed_at":"2026-08-04T11:18:16.369554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.448263Z","title":"A Large-Scale Empirical Study on Semantic Versioning in Golang Ecosystem,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.448263Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:1fb8bc51ad902a91a10ae5a04376ae6dcb9d68ddd17454e8331f929bc0ebc4c6","observation_id":"f08ca95f-0fad-480c-85b9-c1ff0033ae4e","resolution":{"observed_at":"2026-08-04T11:18:16.448263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.526226Z","title":"Back to the Past – Analysing Backporting Practices in Package Dependency Networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.526226Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:e7734e5d3f4c7d8bee30493253bd392689ba81986d995f7988590f7df8660108","observation_id":"5d408b12-0d12-4c97-bfe7-babb24ea0b73","resolution":{"observed_at":"2026-08-04T11:18:16.526226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.628556Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.628556Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:6d4160a04ede587df5a2416093dbb352f6ac7e06b972c06fbff35ce327d12a64","observation_id":"e343ee48-d9d8-49aa-816a-f1ee2405cc3c","resolution":{"observed_at":"2026-08-04T11:18:16.628556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.700977Z","title":"What Do Package Dependencies Tell Us About Semantic Versioning?","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.700977Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:bd465fa8a0defeb4f8ff42e728ebd8fe2717b99eafe62507e5a5e0b060e66fdc","observation_id":"92f593fa-1392-4bc6-95fc-eddc496895c3","resolution":{"observed_at":"2026-08-04T11:18:16.700977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:16.904981Z","title":"Trusting a library: A study of the latency to adopt the latest Maven release,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:16.904981Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:386110e3d31563491c90b17a676762a774563018f2445345b96ef9fa89c6e804","observation_id":"8a63ae5b-8128-4e15-9034-6f69dae2cee7","resolution":{"observed_at":"2026-08-04T11:18:16.904981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.056250Z","title":"Do developers update their library dependencies?","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.056250Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:b3ad303a2ee86cbf093ef1e7f94075228198a3cd1c8859c4ed216e16fb706965","observation_id":"15ca609b-7ef0-4250-9230-b20da36e5da5","resolution":{"observed_at":"2026-08-04T11:18:17.056250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.219861Z","title":"Measuring Dependency Freshness in Software Systems,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.219861Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:995c1de1166dad10c3063c0bfb287781925cf14b42a896b4019b22345213eec5","observation_id":"5a732543-731f-4337-a4e9-45252c1c3bca","resolution":{"observed_at":"2026-08-04T11:18:17.219861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.348324Z","title":"Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.348324Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:57726342f8ab19baf8842b7825a2055f2e1cb4855fadd774034b21425df04fee","observation_id":"6eb2b541-29c3-4d94-8f76-a979a22382f6","resolution":{"observed_at":"2026-08-04T11:18:17.348324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.517096Z","title":"An Empirical Study of Usages, Updates and Risks of Third- Party Libraries in Java Projects,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.517096Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:a36f8bab77d533274c8f1bd9a3b5ce043302d7b33159ed36038ddfb2093c3962","observation_id":"4ecd10cc-08f1-42e7-8309-446f3108a6ea","resolution":{"observed_at":"2026-08-04T11:18:17.517096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.705665Z","title":"Characterizing usages, updates and risks of third-party libraries in Java projects,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.705665Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:6a5891343ecede804e19f7af4a4bfb532e75a598d16c4363b39054d09a85498b","observation_id":"69c08e93-e29c-40cb-8be5-94ef6dbfd300","resolution":{"observed_at":"2026-08-04T11:18:17.705665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.991209Z","title":"Vulnerable open source dependencies: counting those that matter,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.991209Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:5ed06345b57572884dced4712c5e52afe6bab3379b53348409b3893fb35af187","observation_id":"6da4cb95-c757-48d5-a02f-6a20a0bc3608","resolution":{"observed_at":"2026-08-04T11:18:17.991209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:18.065087Z","title":"Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:18.065087Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:890c3ba5b10469fe8a6a28ab4fc4082d2dc64d840e98c6e97ac6fccee42a2d50","observation_id":"da2325d1-6a0b-4171-9896-8ff01da9b923","resolution":{"observed_at":"2026-08-04T11:18:18.065087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:18.148296Z","title":"A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:18.148296Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:136e0a0dc99f086d02a923bbee80f79ac11c2a190cc65dc2819962ae95e39d62","observation_id":"bfa9891c-aa0b-4d5f-aef0-441f1e57ff6d","resolution":{"observed_at":"2026-08-04T11:18:18.148296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.07972","last_updated":"2023-01-19T09:58:49Z","snapshot_observed_at":"2026-07-06T14:42:46.550859Z","submitted_at":"2023-01-19T09:58:49Z","title":"On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.07972","snapshot_observed_at":"2026-08-04T11:18:18.240904Z","title":"On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:18.240904Z"},"links":{"cited_paper":"/paper/2301.07972","citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:8851a5db57773340edeadefbc2ba745d44a84ae892e98406a85faf11c4d9cec8","observation_id":"55858078-f6ac-4eca-b64e-e3672e68cc9f","resolution":{"observed_at":"2026-08-04T11:18:18.240904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:18.313927Z","title":"A Closer Look at the Security Risks in the Rust Ecosystem,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:18.313927Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:4816950280b7a3797442d87d7de41b60ed37bcf31988a0db4c85f917ec26516f","observation_id":"d30bb477-3391-4173-aee9-818c3e46f24d","resolution":{"observed_at":"2026-08-04T11:18:18.313927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:18.463036Z","title":"Vulnerability Exploitability eXchange (VEX) : Use Cases,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:18.463036Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:f828946ce4e299ab3936757652e982979f0448e614f5e36e3db51be510b70d14","observation_id":"311823cf-118a-48b0-8de2-9fee9ca0030e","resolution":{"observed_at":"2026-08-04T11:18:18.463036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T11:18:17.864416Z","title":"Available: https://doi.org/10.1007/s10664-022-10131-8","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","version":3},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-04T11:18:17.864416Z"},"links":{"citing_paper":"/paper/2510.08609"},"observation_digest":"sha256:f309f6ed518d9e6db607cd49e388ce53e62a61186baf175350fd0873f446c873","observation_id":"bbc29e08-bb30-412b-9b9a-08f82491bf1b","resolution":{"observed_at":"2026-08-04T11:18:17.864416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2510.08609","last_updated":"2026-05-24T16:38:01Z","latest_version":3,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-06T08:21:36.313001Z","submitted_at":"2025-10-07T14:37:03Z","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":53,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2510.08609."}