{"as_of":"2026-08-08T14:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:48fd0102cf56d70cceb87a0a50f18c1c7a78ec3f8d13dafd9fd7b9a42a956b83","coverage":[{"denominator":2,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:20:44.838246Z","state":"measured"},{"denominator":2,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":2,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.22023/citation-record","integrity":"/paper/2505.22023/integrity","json":"/paper/2505.22023/citation-record.json","paper":"/paper/2505.22023"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1709.04638","last_updated":"2017-09-14T07:26:48Z","snapshot_observed_at":"2026-07-06T05:59:35.716426Z","submitted_at":"2017-09-14T07:26:48Z","title":"On the Impact of Micro-Packages: An Empirical Study of the npm JavaScript Ecosystem","version":1},"cited_work":{"arxiv_id":"1709.04638","doi":null,"metadata_source":"pith","pith_arxiv_id":"1709.04638","snapshot_observed_at":"2026-08-07T13:20:45.126894Z","title":"On the Impact of Micro-Packages: An Empirical Study of the npm JavaScript Ecosystem","venue":"cs.SE","work_id":"5c003243-6473-4685-809b-23aabb9f5ad6","year":2017},"citing_paper":{"arxiv_id":"2505.22023","last_updated":"2025-05-28T06:42:37Z","snapshot_observed_at":"2026-08-07T13:14:47.104569Z","submitted_at":"2025-05-28T06:42:37Z","title":"Securing the Software Package Supply Chain for Critical Systems","version":1},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-07T13:20:44.762479Z"},"links":{"cited_paper":"/paper/1709.04638","citing_paper":"/paper/2505.22023"},"observation_digest":"sha256:985b4636b6837abffc46915e0bcebd8498d29220ca6dfdcac84828ffcf2ff493","observation_id":"d69f5690-8ab1-4d1d-a5e4-b0c2862458d3","resolution":{"observed_at":"2026-08-07T13:20:45.226254Z","resolver_source":"local_arxiv","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:20:44.838246Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22023","last_updated":"2025-05-28T06:42:37Z","snapshot_observed_at":"2026-08-07T13:14:47.104569Z","submitted_at":"2025-05-28T06:42:37Z","title":"Securing the Software Package Supply Chain for Critical Systems","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-07T13:20:44.838246Z"},"links":{"citing_paper":"/paper/2505.22023"},"observation_digest":"sha256:3884ec41665c1886c4afe3423d95947559e04db6db0ed91f47941fedc20c10e8","observation_id":"55a97b24-0c17-41ba-8794-467bdf8b6dd3","resolution":{"observed_at":"2026-08-07T13:20:44.838246Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.22023","last_updated":"2025-05-28T06:42:37Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-07T13:14:47.104569Z","submitted_at":"2025-05-28T06:42:37Z","title":"Securing the Software Package Supply Chain for Critical Systems"},"reference_resolution":{"displayed":2,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":2},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 2 of 2 outbound references and 0 inbound Pith citation observations for arXiv:2505.22023."}