{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:SRFO5OUKAZZ5H5GF2FPAREJPOR","short_pith_number":"pith:SRFO5OUK","canonical_record":{"source":{"id":"1711.05019","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-11-14T09:33:49Z","cross_cats_sorted":["cs.PL"],"title_canon_sha256":"ed7fe30d36b41250b192a68834d0c364d8cb7b6b8940cba410dc7de408e6450c","abstract_canon_sha256":"198f5afa3727a83e1ef5c5a03426d88c41fdfd0ee2993afa507d77e403009fd9"},"schema_version":"1.0"},"canonical_sha256":"944aeeba8a0673d3f4c5d15e08912f74453e7e44e1bda7fd9d2643247e098bcf","source":{"kind":"arxiv","id":"1711.05019","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.05019","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"arxiv_version","alias_value":"1711.05019v1","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.05019","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"pith_short_12","alias_value":"SRFO5OUKAZZ5","created_at":"2026-05-18T12:31:43Z"},{"alias_kind":"pith_short_16","alias_value":"SRFO5OUKAZZ5H5GF","created_at":"2026-05-18T12:31:43Z"},{"alias_kind":"pith_short_8","alias_value":"SRFO5OUK","created_at":"2026-05-18T12:31:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:SRFO5OUKAZZ5H5GF2FPAREJPOR","target":"record","payload":{"canonical_record":{"source":{"id":"1711.05019","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-11-14T09:33:49Z","cross_cats_sorted":["cs.PL"],"title_canon_sha256":"ed7fe30d36b41250b192a68834d0c364d8cb7b6b8940cba410dc7de408e6450c","abstract_canon_sha256":"198f5afa3727a83e1ef5c5a03426d88c41fdfd0ee2993afa507d77e403009fd9"},"schema_version":"1.0"},"canonical_sha256":"944aeeba8a0673d3f4c5d15e08912f74453e7e44e1bda7fd9d2643247e098bcf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:30:35.157909Z","signature_b64":"V4digTC8+1pB3GFswfBgVgo4lvsKmG944xs3mPfXS+Ss5hG/pLeZqtI8jKGbiq0CMZ2HJcguaFIS9KiRMRd0AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"944aeeba8a0673d3f4c5d15e08912f74453e7e44e1bda7fd9d2643247e098bcf","last_reissued_at":"2026-05-18T00:30:35.157232Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:30:35.157232Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1711.05019","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:30:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J6c4ZYnbxWvnr+Bgm9uF1/N4qjLjjBx/KU4RJYeK5TKLqPtub+iKif6PKRv5QVb6PCXBrOpXtLVjPe1EoiQ7Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T23:01:51.876132Z"},"content_sha256":"8abbe1d25115c44f444ce8035eec40f6958e5c74d25eb621158b6ceede5c8a74","schema_version":"1.0","event_id":"sha256:8abbe1d25115c44f444ce8035eec40f6958e5c74d25eb621158b6ceede5c8a74"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:SRFO5OUKAZZ5H5GF2FPAREJPOR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Comparing Bug Finding Tools with Reviews and Tests","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.PL"],"primary_cat":"cs.SE","authors_text":"Claudia Koller, Jan J\\\"urjens, Peter Trischberger, Stefan Wagner","submitted_at":"2017-11-14T09:33:49Z","abstract_excerpt":"Bug finding tools can find defects in software source code us- ing an automated static analysis. This automation may be able to reduce the time spent for other testing and review activities. For this we need to have a clear understanding of how the defects found by bug finding tools relate to the defects found by other techniques. This paper describes a case study using several projects mainly from an industrial environment that were used to analyse the interrelationships. The main finding is that the bug finding tools predominantly find different defects than testing but a subset of defects f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.05019","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:30:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HBaYreYevJh2t4pJCjdoRtkHunsmD9rfRXxLsLmSNBhurh0H7ICEtaGAzXTtDHkpObWOwKbzZkO8LEcQX46lBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T23:01:51.876507Z"},"content_sha256":"07b34739b28e74e3b7f01f2ec2f9f161eac7d4b85f13c19b25acee4fe1c6c7a5","schema_version":"1.0","event_id":"sha256:07b34739b28e74e3b7f01f2ec2f9f161eac7d4b85f13c19b25acee4fe1c6c7a5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/bundle.json","state_url":"https://pith.science/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T23:01:51Z","links":{"resolver":"https://pith.science/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR","bundle":"https://pith.science/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/bundle.json","state":"https://pith.science/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SRFO5OUKAZZ5H5GF2FPAREJPOR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:SRFO5OUKAZZ5H5GF2FPAREJPOR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"198f5afa3727a83e1ef5c5a03426d88c41fdfd0ee2993afa507d77e403009fd9","cross_cats_sorted":["cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-11-14T09:33:49Z","title_canon_sha256":"ed7fe30d36b41250b192a68834d0c364d8cb7b6b8940cba410dc7de408e6450c"},"schema_version":"1.0","source":{"id":"1711.05019","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.05019","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"arxiv_version","alias_value":"1711.05019v1","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.05019","created_at":"2026-05-18T00:30:35Z"},{"alias_kind":"pith_short_12","alias_value":"SRFO5OUKAZZ5","created_at":"2026-05-18T12:31:43Z"},{"alias_kind":"pith_short_16","alias_value":"SRFO5OUKAZZ5H5GF","created_at":"2026-05-18T12:31:43Z"},{"alias_kind":"pith_short_8","alias_value":"SRFO5OUK","created_at":"2026-05-18T12:31:43Z"}],"graph_snapshots":[{"event_id":"sha256:07b34739b28e74e3b7f01f2ec2f9f161eac7d4b85f13c19b25acee4fe1c6c7a5","target":"graph","created_at":"2026-05-18T00:30:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Bug finding tools can find defects in software source code us- ing an automated static analysis. This automation may be able to reduce the time spent for other testing and review activities. For this we need to have a clear understanding of how the defects found by bug finding tools relate to the defects found by other techniques. This paper describes a case study using several projects mainly from an industrial environment that were used to analyse the interrelationships. The main finding is that the bug finding tools predominantly find different defects than testing but a subset of defects f","authors_text":"Claudia Koller, Jan J\\\"urjens, Peter Trischberger, Stefan Wagner","cross_cats":["cs.PL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-11-14T09:33:49Z","title":"Comparing Bug Finding Tools with Reviews and Tests"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.05019","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8abbe1d25115c44f444ce8035eec40f6958e5c74d25eb621158b6ceede5c8a74","target":"record","created_at":"2026-05-18T00:30:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"198f5afa3727a83e1ef5c5a03426d88c41fdfd0ee2993afa507d77e403009fd9","cross_cats_sorted":["cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-11-14T09:33:49Z","title_canon_sha256":"ed7fe30d36b41250b192a68834d0c364d8cb7b6b8940cba410dc7de408e6450c"},"schema_version":"1.0","source":{"id":"1711.05019","kind":"arxiv","version":1}},"canonical_sha256":"944aeeba8a0673d3f4c5d15e08912f74453e7e44e1bda7fd9d2643247e098bcf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"944aeeba8a0673d3f4c5d15e08912f74453e7e44e1bda7fd9d2643247e098bcf","first_computed_at":"2026-05-18T00:30:35.157232Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:30:35.157232Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"V4digTC8+1pB3GFswfBgVgo4lvsKmG944xs3mPfXS+Ss5hG/pLeZqtI8jKGbiq0CMZ2HJcguaFIS9KiRMRd0AQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:30:35.157909Z","signed_message":"canonical_sha256_bytes"},"source_id":"1711.05019","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8abbe1d25115c44f444ce8035eec40f6958e5c74d25eb621158b6ceede5c8a74","sha256:07b34739b28e74e3b7f01f2ec2f9f161eac7d4b85f13c19b25acee4fe1c6c7a5"],"state_sha256":"00b1ad5c960b804667adafc98ec5dd81344d4f29b3c80ab05d15e19560439062"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DwdjOxxpKEopBDO9bLcIBEv6NA6ex3Gntr04EEbOCt9m5qOWflZVJ2GMyY1bskTBgeTDw06ZUehNBLIXmztUDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T23:01:51.878506Z","bundle_sha256":"4f5141d18af0335abf1658bd2b7fa692ee44d7e1380d947059faa54a15ed0c22"}}