Paper Citation Record · LEDGER

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks

As of 10 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2502.04621.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.04621 v2

Coverage vector

measured 36 of 36 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-08T22:08:43.355975Z

measured 36 of 36 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

36 of 36 outbound references displayed

verified exact4
verified fuzzy27
unresolved3
parse uncertain0
malformed identifier0
metadata mismatch2

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 2a0bc92c-93a4-4e9b-b0ff-c94ac42b5204 · outbound

This paper cites Structure and evolution of package dependency networks,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Structure and evolution of package dependency networks,

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.883603Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 299b5c6f-85c1-4338-af11-0c32e81dea69 · outbound

This paper cites Analyzing the direct and transitive impact of vulnerabilities onto different artifact repositories,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Analyzing the direct and transitive impact of vulnerabilities onto different artifact repositories,

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.874030Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cb3b88e9-503d-406b-8bf1-daa8833114a3 · outbound

This paper cites Software vulnerabilities overview: A descriptive study,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Software vulnerabilities overview: A descriptive study,

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.864776Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 50f12c23-01a2-4ca9-9ea8-60341e8ff462 · outbound

This paper cites Common vulnerabilities and exposures (cve): Overview,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Common vulnerabilities and exposures (cve): Overview,

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.854835Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c116e157-ee4e-47d6-b68c-9a19892bcc27 · outbound

This paper cites Osv: Open source vulnerabilities,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Osv: Open source vulnerabilities,

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.845010Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0596dfff-895e-4737-a8ce-fadd0e860b8a · outbound

This paper cites Stack overflow developer survey 2024,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Stack overflow developer survey 2024,

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.835117Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f138defe-e7b3-497f-9a5b-a39a4d337147 · outbound

This paper cites Maven repository: Central repository search,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Maven repository: Central repository search,

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.825843Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation eef6b30f-fb31-43ec-991f-19888dfa3b91 · outbound

This paper cites Empirical analysis of security vulnerabilities in python packages,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Empirical analysis of security vulnerabilities in python packages,

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.815709Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 418f6c4d-f19e-44f6-bece-3cbb488a5bf9 · outbound

This paper cites On the discoverability of npm vulnerabilities in node.js projects,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the discoverability of npm vulnerabilities in node.js projects,

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.806199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1804784c-d65f-465c-9195-8d780a97729f · outbound

This paper cites Vulnerability of package dependency networks,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Vulnerability of package dependency networks,

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.796893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7a4ed11c-9268-4e4d-a324-c3c5bdfc9ef5 · outbound

This paper cites Understanding the threats of upstream vulnerabilities to downstream projects in the maven ecosystem,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Understanding the threats of upstream vulnerabilities to downstream projects in the maven ecosystem,

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.786098Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 57783831-4ead-4947-921a-622e8c431d16 · outbound

This paper cites Discovery of Timeline and Crowd Reaction of Software Vulnerability Disclosures.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Discovery of Timeline and Crowd Reaction of Software Vulnerability Disclosures

Reference 12

Resolution: verified exact; local_arxiv, observed 2026-08-08T22:09:28.596024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 72f2676a-4eba-4f64-97a1-cda8e6af9490 · outbound

This paper cites Navigating and exploring software dependency graphs using goblin,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Navigating and exploring software dependency graphs using goblin,

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.775641Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 2ab73402-78e0-475d-835e-17c5e96c75a3 · outbound

This paper cites Charac- terizing dependency update practice of npm, pypi and cargo packages,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Charac- terizing dependency update practice of npm, pypi and cargo packages,

Reference 14

Resolution: verified exact; raw_fallback, observed 2026-08-08T22:09:28.579772Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 2b857491-9ddc-4c4d-929f-04655d3392d1 · outbound

This paper cites OpenSSF Scorecard: On the Path Toward Ecosystem-wide Automated Security Metrics.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks OpenSSF Scorecard: On the Path Toward Ecosystem-wide Automated Security Metrics

Reference 15

Resolution: verified exact; local_arxiv, observed 2026-08-08T22:09:13.542251Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 96b5b430-b867-45fd-afd5-c0fe0b0e051e · outbound

This paper cites Sonatype central search rest api guide,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Sonatype central search rest api guide,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.765065Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 6e02a9c7-211a-4853-b1b5-a430ba6e4b8f · outbound

This paper cites OpenDigger,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks OpenDigger,

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.754889Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 71cdf54c-09d4-4a19-991e-30e85339d559 · outbound

This paper cites GH Archive,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks GH Archive,

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.744233Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0630d7dc-2596-4021-b528-fdc7950da990 · outbound

This paper cites CHAOSS: Community Health Analytics Open Source Software,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks CHAOSS: Community Health Analytics Open Source Software,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.733696Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 426ba058-ca31-48ac-a6e7-3421f899d75c · outbound

This paper cites X-Lab: Unlocking Innovation,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks X-Lab: Unlocking Innovation,

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.722559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f9df8d41-f5c9-499e-8d4e-941e5d238d2c · outbound

This paper cites On a test of whether one of two random variables is stochastically larger than the other,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On a test of whether one of two random variables is stochastically larger than the other,

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.712356Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation bf2cafdb-f9c1-4c81-abb6-ef73879f71bd · outbound

This paper cites On the use of refactoring in security vulnerability fixes: An exploratory study on maven libraries,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the use of refactoring in security vulnerability fixes: An exploratory study on maven libraries,

Reference 22

Resolution: metadata mismatch; raw_fallback, observed 2026-08-08T22:09:13.527405Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1dc23f0b-ba68-4fce-9b92-c74827d1327a · outbound

This paper cites Contributor absence factor,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Contributor absence factor,

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.701766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ebb0499c-e524-44b1-84eb-d4be87166db6 · outbound

This paper cites Empirical findings on team size and productivity in software development,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Empirical findings on team size and productivity in software development,

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.689965Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 4a7b13d6-e489-49d9-a8cd-70b2f7b33c11 · outbound

This paper cites Evaluating complexity, code churn, and developer activity metrics as indicators of software vulnerabilities,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Evaluating complexity, code churn, and developer activity metrics as indicators of software vulnerabilities,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-08T22:08:43.181569Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ad1d48f-fd6c-4acd-9a46-e54ae1d84824 · outbound

This paper cites An empirical investigation of the security weaknesses in open-source projects,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks An empirical investigation of the security weaknesses in open-source projects,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-08T22:08:43.185026Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35d98d5a-7370-4ddc-ba31-46817753cf2d · outbound

This paper cites Correlation between github stars and code vulnerabilities,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Correlation between github stars and code vulnerabilities,

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.672532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 81641e09-93f2-4ca9-89bb-511bb19084d5 · outbound

This paper cites Mitigating persistence of open-source vulnerabilities in maven ecosystem,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Mitigating persistence of open-source vulnerabilities in maven ecosystem,

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.662501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 6076efe5-b23d-4a7a-b89a-14824b07a4d2 · outbound

This paper cites Tracking known security vulnerabilities in proprietary software systems,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Tracking known security vulnerabilities in proprietary software systems,

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.652242Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cf90f9b3-5f1e-403d-8b9a-d09f76616925 · outbound

This paper cites On the security blind spots of software composition analysis,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the security blind spots of software composition analysis,

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.641308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5b0df98f-c93d-4337-905d-bf27707fc01b · outbound

This paper cites A large-scale security- oriented static analysis of python packages in pypi,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks A large-scale security- oriented static analysis of python packages in pypi,

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.630447Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c0e7bfd2-3dea-4024-9c68-7743c23ea3f3 · outbound

This paper cites On the impact of security vulnerabilities in the npm and rubygems dependency networks,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the impact of security vulnerabilities in the npm and rubygems dependency networks,

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-08T22:08:43.208708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4510ab2c-2dcb-4773-bc8f-c8e6e3d4b214 · outbound

This paper cites Small world with high risks: A study of security threats in the npm ecosystem,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Small world with high risks: A study of security threats in the npm ecosystem,

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.619513Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 8450d9f1-0bdf-4845-900c-53c40599818d · outbound

This paper cites On the effect of transitivity and granularity on vulnerability propagation in the maven ecosystem,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the effect of transitivity and granularity on vulnerability propagation in the maven ecosystem,

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T22:09:28.607365Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 95b02c0b-bdd5-4c0b-a921-3e6245165767 · outbound

This paper cites Ethics in the mining of software repositories,.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks Ethics in the mining of software repositories,

Reference 35

Resolution: verified exact; doi, observed 2026-08-08T22:08:43.393083Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 794a62a9-ed3e-40d8-9f6a-c34a13871f17 · outbound

This paper cites On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem.

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem

Reference 2023

Resolution: metadata mismatch; local_arxiv, observed 2026-08-08T22:08:43.435888Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Pith citing papers

No inbound Pith citation observations are available.