{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:F75ATQKEOUI4QEV2RTMMCBCAUD","short_pith_number":"pith:F75ATQKE","canonical_record":{"source":{"id":"2201.08201","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T14:29:01Z","cross_cats_sorted":[],"title_canon_sha256":"58cdc965c58739507b557e731ffb09a3b63ecb7760a5c47d1388ef3a4615022f","abstract_canon_sha256":"9180952f75d3c7bd2f36f42bcf7f97a5470ddad9587001892023b04f7e7d2bf9"},"schema_version":"1.0"},"canonical_sha256":"2ffa09c1447511c812ba8cd8c10440a0dc756d8084fe2bc30154fdbbc8ddd58f","source":{"kind":"arxiv","id":"2201.08201","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.08201","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"arxiv_version","alias_value":"2201.08201v1","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.08201","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_12","alias_value":"F75ATQKEOUI4","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_16","alias_value":"F75ATQKEOUI4QEV2","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_8","alias_value":"F75ATQKE","created_at":"2026-07-05T03:50:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:F75ATQKEOUI4QEV2RTMMCBCAUD","target":"record","payload":{"canonical_record":{"source":{"id":"2201.08201","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T14:29:01Z","cross_cats_sorted":[],"title_canon_sha256":"58cdc965c58739507b557e731ffb09a3b63ecb7760a5c47d1388ef3a4615022f","abstract_canon_sha256":"9180952f75d3c7bd2f36f42bcf7f97a5470ddad9587001892023b04f7e7d2bf9"},"schema_version":"1.0"},"canonical_sha256":"2ffa09c1447511c812ba8cd8c10440a0dc756d8084fe2bc30154fdbbc8ddd58f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:50:09.668504Z","signature_b64":"Q1eAlEYvmQfIh63TzjyWOAzkOWnA5v+jUwIVBwCixYrdCCk9FcJzcATgsejMl571gOX8W2pr3GHxSsXdSeWMCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2ffa09c1447511c812ba8cd8c10440a0dc756d8084fe2bc30154fdbbc8ddd58f","last_reissued_at":"2026-07-05T03:50:09.667940Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:50:09.667940Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.08201","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1f7LgpxxoDeQygqXBmtTp1KbnJ7iUAyrJoNZqebcPypeHiA0cWjwU6Bg57M/0AzqxkVIAa8Ou7GLKhjWpCqXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T13:35:31.429142Z"},"content_sha256":"51010b5c14ae3355d74635895cae99301690e30c19bcdd9a0a03554aeef81acf","schema_version":"1.0","event_id":"sha256:51010b5c14ae3355d74635895cae99301690e30c19bcdd9a0a03554aeef81acf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:F75ATQKEOUI4QEV2RTMMCBCAUD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Providing Upgrade Plans for Third-party Libraries: A Recommender System using Migration Graphs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Claudio Di Sipio, Davide Di Ruscio, Juri Di Rocco, Phuong T. Nguyen, Riccardo Rubei","submitted_at":"2022-01-20T14:29:01Z","abstract_excerpt":"During the development of a software project, developers often need to upgrade third-party libraries (TPLs), aiming to keep their code up-to-date with the newest functionalities offered by the used libraries. In most cases, upgrading used TPLs is a complex and error-prone activity that must be carefully carried out to limit the ripple effects on the software project that depends on the libraries being upgraded. In this paper, we propose EvoPlan as a novel approach to the recommendation of different upgrade plans given a pair of library-version as input. In particular, among the different paths"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.08201","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.08201/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7YxBmNTh1XQ+IE6BtjHPfp2DTTlLqspKcBbSAcddbmyRqW6K0SO0qnwCQuCBHA7d3fcozNx9T4ruxIFUwQsdAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T13:35:31.430133Z"},"content_sha256":"35a15b009fd6f25ad7fd7ee2af33de25ec17d73406f30c27299ea35348f83499","schema_version":"1.0","event_id":"sha256:35a15b009fd6f25ad7fd7ee2af33de25ec17d73406f30c27299ea35348f83499"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/bundle.json","state_url":"https://pith.science/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T13:35:31Z","links":{"resolver":"https://pith.science/pith/F75ATQKEOUI4QEV2RTMMCBCAUD","bundle":"https://pith.science/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/bundle.json","state":"https://pith.science/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F75ATQKEOUI4QEV2RTMMCBCAUD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:F75ATQKEOUI4QEV2RTMMCBCAUD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9180952f75d3c7bd2f36f42bcf7f97a5470ddad9587001892023b04f7e7d2bf9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T14:29:01Z","title_canon_sha256":"58cdc965c58739507b557e731ffb09a3b63ecb7760a5c47d1388ef3a4615022f"},"schema_version":"1.0","source":{"id":"2201.08201","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.08201","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"arxiv_version","alias_value":"2201.08201v1","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.08201","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_12","alias_value":"F75ATQKEOUI4","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_16","alias_value":"F75ATQKEOUI4QEV2","created_at":"2026-07-05T03:50:09Z"},{"alias_kind":"pith_short_8","alias_value":"F75ATQKE","created_at":"2026-07-05T03:50:09Z"}],"graph_snapshots":[{"event_id":"sha256:35a15b009fd6f25ad7fd7ee2af33de25ec17d73406f30c27299ea35348f83499","target":"graph","created_at":"2026-07-05T03:50:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.08201/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"During the development of a software project, developers often need to upgrade third-party libraries (TPLs), aiming to keep their code up-to-date with the newest functionalities offered by the used libraries. In most cases, upgrading used TPLs is a complex and error-prone activity that must be carefully carried out to limit the ripple effects on the software project that depends on the libraries being upgraded. In this paper, we propose EvoPlan as a novel approach to the recommendation of different upgrade plans given a pair of library-version as input. In particular, among the different paths","authors_text":"Claudio Di Sipio, Davide Di Ruscio, Juri Di Rocco, Phuong T. Nguyen, Riccardo Rubei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T14:29:01Z","title":"Providing Upgrade Plans for Third-party Libraries: A Recommender System using Migration Graphs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.08201","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:51010b5c14ae3355d74635895cae99301690e30c19bcdd9a0a03554aeef81acf","target":"record","created_at":"2026-07-05T03:50:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9180952f75d3c7bd2f36f42bcf7f97a5470ddad9587001892023b04f7e7d2bf9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T14:29:01Z","title_canon_sha256":"58cdc965c58739507b557e731ffb09a3b63ecb7760a5c47d1388ef3a4615022f"},"schema_version":"1.0","source":{"id":"2201.08201","kind":"arxiv","version":1}},"canonical_sha256":"2ffa09c1447511c812ba8cd8c10440a0dc756d8084fe2bc30154fdbbc8ddd58f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2ffa09c1447511c812ba8cd8c10440a0dc756d8084fe2bc30154fdbbc8ddd58f","first_computed_at":"2026-07-05T03:50:09.667940Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:09.667940Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q1eAlEYvmQfIh63TzjyWOAzkOWnA5v+jUwIVBwCixYrdCCk9FcJzcATgsejMl571gOX8W2pr3GHxSsXdSeWMCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:09.668504Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.08201","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:51010b5c14ae3355d74635895cae99301690e30c19bcdd9a0a03554aeef81acf","sha256:35a15b009fd6f25ad7fd7ee2af33de25ec17d73406f30c27299ea35348f83499"],"state_sha256":"f2b1409f5b9e93afa22d99b70bce55048f653951883aa89362b22a18eb398285"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XANoJDrvIvalVJKHOlMJ9E/cL/DNms0XSgPkfHHzQK9OJJK/q93gJWf+mlwsbcNCzSEF+sl7IpsRPOazfin1Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T13:35:31.435987Z","bundle_sha256":"9084f7166b7ebff6008a18679329bcec49f154d7ec397c5cf5d7e6c3696747e3"}}