{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:XMAXB6CY5B2KFRWM3MNY475MBB","short_pith_number":"pith:XMAXB6CY","schema_version":"1.0","canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","source":{"kind":"arxiv","id":"2310.02059","version":4},"attestation_state":"computed","paper":{"title":"Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Amjed Tahir, Jiaxin Yu, Jinfu Chen, Mojtaba Shahin, Peng Liang, Yujia Fu, Zengyang Li","submitted_at":"2023-10-03T14:01:28Z","abstract_excerpt":"Modern code generation tools utilizing AI models like Large Language Models (LLMs) have gained increased popularity due to their ability to produce functional code. However, their usage presents security challenges, often resulting in insecure code merging into the code base. Thus, evaluating the quality of generated code, especially its security, is crucial. While prior research explored various aspects of code generation, the focus on security has been limited, mostly examining code produced in controlled environments rather than open source development scenarios. To address this gap, we con"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2310.02059","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"611e7cd188516d0b67a4f479d3fb580ae39208064e4eb7eb89b72c07dea22f7d","abstract_canon_sha256":"6ca2217cb610d7b07f5a208c5dbbcca751e899d8de22568f0fca4fb3702c8205"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:21.890643Z","signature_b64":"tAkTj0SKhqZ0zbfpQwXwrxbvQAp2sQ2JQ+piLSFTMT2GsWawANGZt3GzsgjdRvmT8VmSEuKZqjUdDqnNWeuGCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","last_reissued_at":"2026-07-05T10:10:21.890170Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:21.890170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Amjed Tahir, Jiaxin Yu, Jinfu Chen, Mojtaba Shahin, Peng Liang, Yujia Fu, Zengyang Li","submitted_at":"2023-10-03T14:01:28Z","abstract_excerpt":"Modern code generation tools utilizing AI models like Large Language Models (LLMs) have gained increased popularity due to their ability to produce functional code. However, their usage presents security challenges, often resulting in insecure code merging into the code base. Thus, evaluating the quality of generated code, especially its security, is crucial. While prior research explored various aspects of code generation, the focus on security has been limited, mostly examining code produced in controlled environments rather than open source development scenarios. To address this gap, we con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.02059","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.02059/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2310.02059","created_at":"2026-07-05T10:10:21.890224+00:00"},{"alias_kind":"arxiv_version","alias_value":"2310.02059v4","created_at":"2026-07-05T10:10:21.890224+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.02059","created_at":"2026-07-05T10:10:21.890224+00:00"},{"alias_kind":"pith_short_12","alias_value":"XMAXB6CY5B2K","created_at":"2026-07-05T10:10:21.890224+00:00"},{"alias_kind":"pith_short_16","alias_value":"XMAXB6CY5B2KFRWM","created_at":"2026-07-05T10:10:21.890224+00:00"},{"alias_kind":"pith_short_8","alias_value":"XMAXB6CY","created_at":"2026-07-05T10:10:21.890224+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":4,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2605.27399","citing_title":"Short-Term Gain, Long-Term Fragility: AI Labor Substitution and the Erosion of Sustainable Capability","ref_index":2,"is_internal_anchor":false},{"citing_arxiv_id":"2605.24300","citing_title":"Enhancing Reliability in LLM-Based Secure Code Generation","ref_index":10,"is_internal_anchor":false},{"citing_arxiv_id":"2605.08382","citing_title":"SecureForge: Finding and Preventing Vulnerabilities in LLM-Generated Code via Prompt Optimization","ref_index":23,"is_internal_anchor":false},{"citing_arxiv_id":"2604.17763","citing_title":"A Quasi-Experimental Developer Study of Security Training in LLM-Assisted Web Application Development","ref_index":17,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB","json":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB.json","graph_json":"https://pith.science/api/pith-number/XMAXB6CY5B2KFRWM3MNY475MBB/graph.json","events_json":"https://pith.science/api/pith-number/XMAXB6CY5B2KFRWM3MNY475MBB/events.json","paper":"https://pith.science/paper/XMAXB6CY"},"agent_actions":{"view_html":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB","download_json":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB.json","view_paper":"https://pith.science/paper/XMAXB6CY","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2310.02059&json=true","fetch_graph":"https://pith.science/api/pith-number/XMAXB6CY5B2KFRWM3MNY475MBB/graph.json","fetch_events":"https://pith.science/api/pith-number/XMAXB6CY5B2KFRWM3MNY475MBB/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/action/timestamp_anchor","attest_storage":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/action/storage_attestation","attest_author":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/action/author_attestation","sign_citation":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/action/citation_signature","submit_replication":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/action/replication_record"}},"created_at":"2026-07-05T10:10:21.890224+00:00","updated_at":"2026-07-05T10:10:21.890224+00:00"}