Paper Citation Record · LEDGER

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages

As of 10 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2607.15315.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.15315 v1

Coverage vector

measured 28 of 28 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T02:11:24.932094Z

measured 28 of 28 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

28 of 28 outbound references displayed

verified exact1
verified fuzzy0
unresolved27
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation f9816f4e-0d4c-4168-9bd6-1c3b89695b4f · outbound

This paper cites https://github.com/advisories.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages https://github.com/advisories

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:21.577520Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6fe8f6c3-b997-4835-bac7-7443ddb006dd · outbound

This paper cites https://deps.dev/.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages https://deps.dev/

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:21.651536Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 54e5e677-c799-4cf8-8d73-fe6184305418 · outbound

This paper cites https://ecosyste.ms/.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages https://ecosyste.ms/

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:21.715992Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 104410da-a5c0-4d23-85a3-b94e817e250d · outbound

This paper cites https: //osv.dev.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages https: //osv.dev

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:21.798098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c7b0f3f6-1001-4cbb-8363-a909060ea642 · outbound

This paper cites https://semver.org/.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages https://semver.org/

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:21.950664Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50dc52f3-5144-4b0f-bab7-2e9cf042a4d0 · outbound

This paper cites Why do developers use trivial packages? an empirical case study on npm.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Why do developers use trivial packages? an empirical case study on npm

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.072894Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 85500987-fa6c-4629-a2a4-4b8c4cb5259d · outbound

This paper cites R., RIETVELD, K.,ANDGADYATSKAYA, O.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages R., RIETVELD, K.,ANDGADYATSKAYA, O

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.212441Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9cf7edb0-bbfa-4f9a-97cc-6e81461ff717 · outbound

This paper cites an unresolved cited work.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.374575Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 141d1edf-06f2-44a9-b1dd-a3b7d1a34202 · outbound

This paper cites Measur- ing Dependency Freshness in Software Systems.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Measur- ing Dependency Freshness in Software Systems

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.531966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a5986b20-b1f6-4668-bb92-8f32c5b20c58 · outbound

This paper cites A.,ANDKHOLOOSI, M.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages A.,ANDKHOLOOSI, M

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.646242Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b701b239-a1ad-4b94-b23e-b21057314dd6 · outbound

This paper cites OSV: Current data sources.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages OSV: Current data sources

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.821962Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 770379e0-39b4-4c5e-b3d7-42268f607f22 · outbound

This paper cites Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:22.936754Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4805729f-3208-4b98-8cce-2ddf79efe59b · outbound

This paper cites Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.101583Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 02d0c603-2e1f-4d12-b004-ef357dce8769 · outbound

This paper cites A Preliminary Study of Rhythm and Speed in the Maven Ecosystem.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages A Preliminary Study of Rhythm and Speed in the Maven Ecosystem

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.268629Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c09261f1-2194-4296-ab23-896938349bd6 · outbound

This paper cites E.,ANDPOIZAT, P.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages E.,ANDPOIZAT, P

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.380624Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0ac6cf9-ca89-4e26-990f-3bc111abdb08 · outbound

This paper cites Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.515868Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 27fc2371-e794-4254-9dee-c2109a6b9ae1 · outbound

This paper cites Demystifying the Vulnerability Propagation and Its Evolution via De- pendency Trees in the NPM Ecosystem.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Demystifying the Vulnerability Propagation and Its Evolution via De- pendency Trees in the NPM Ecosystem

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.681842Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e44f80a1-687a-4684-bf80-cf33cb68c40c · outbound

This paper cites World of code: Enabling a research workflow for mining and analyzing the universe of open source vcs data.Empirical Software Engineering 26, 2 (2021), 1–42.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages World of code: Enabling a research workflow for mining and analyzing the universe of open source vcs data.Empirical Software Engineering 26, 2 (2021), 1–42

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.948621Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 876c5fa4-344a-4634-b8c4-daab11697d49 · outbound

This paper cites Understanding the Response to Open-Source Dependency Abandonment in the npm Ecosystem.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Understanding the Response to Open-Source Dependency Abandonment in the npm Ecosystem

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.072893Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3adf2f43-4e03-4b0f-855e-59785b3de7c7 · outbound

This paper cites A Large Scale Analysis of Semantic Versioning in NPM.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages A Large Scale Analysis of Semantic Versioning in NPM

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.221413Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4154f64b-eaa4-4cac-9b37-89d7ea46dcfa · outbound

This paper cites npm-follower: A Complete Dataset Tracking the NPM Ecosystem.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages npm-follower: A Complete Dataset Tracking the NPM Ecosystem

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.391727Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e21596c-35ff-422d-af3b-5abc2a1db70b · outbound

This paper cites an unresolved cited work.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.507711Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 69b7c778-f5bf-4782-8ef6-be988378d1b0 · outbound

This paper cites CHRONO-RESOLUTION: A dependency resolution dataset at release points for npm, pypi, and crates.io packages.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages CHRONO-RESOLUTION: A dependency resolution dataset at release points for npm, pypi, and crates.io packages

Reference 23

Resolution: verified exact; doi, observed 2026-08-02T02:14:03.976809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 80055a14-5f39-4f30-9288-b6df84d26932 · outbound

This paper cites What’s in a package? getting visibility into dependencies using security-sensitive api calls, 2025.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages What’s in a package? getting visibility into dependencies using security-sensitive api calls, 2025

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.715195Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c1fb9a7-ced4-4701-b6f1-815c674e1eef · outbound

This paper cites How quickly do development teams update their vulnerable dependencies?, 2026.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages How quickly do development teams update their vulnerable dependencies?, 2026

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.718051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31e3a8a2-a3c9-4ccf-a14a-ce5c96d9057e · outbound

This paper cites Libraries.io – The Open Source Discovery Service.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Libraries.io – The Open Source Discovery Service

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.794900Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b47db3a4-04e5-42e5-b6fd-de2c3de12592 · outbound

This paper cites Research directions in software supply chain security.ACM Trans.

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Research directions in software supply chain security.ACM Trans

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:24.932094Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 73460dd0-776c-4079-98bb-aacab996c81d · outbound

This paper cites Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem.

Reference 684

Resolution: unresolved; no resolver link, observed 2026-08-02T02:11:23.800340Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.