{"as_of":"2026-08-09T13:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8ab269bedbc2b6a72fd7bba5bde0153f7a3229bad8d4b6a51d7c3b6130d5508e","coverage":[{"denominator":105,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:33:53.416062Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07728/citation-record","integrity":"/paper/2506.07728/integrity","json":"/paper/2506.07728/citation-record.json","paper":"/paper/2506.07728"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:40.440293Z","title":"https://github.com/ expressjs/express/pull/2748","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:40.440293Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:59ae2bea7d4c09f8ec403f3420322975442518828382e21820075362fb948c73","observation_id":"e16878f0-75ea-4e7c-b50b-373acd51dc0f","resolution":{"observed_at":"2026-08-07T05:33:40.440293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:40.546751Z","title":"https://github.com/ MetaMask/snaps/issues/1018","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:40.546751Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:3b94a94f2b48f9286845bf625d076dcea18140ef48fcdbdccc57294d3053e909","observation_id":"b17d262b-1d24-4602-aa2e-c34e8f62a49a","resolution":{"observed_at":"2026-08-07T05:33:40.546751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:40.693826Z","title":"https:// github.com/netlify/build/issues/193","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:40.693826Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c5a2822c1eae33480e81a8e87347ac5650f82f9860be5112198d1b1da67d3c79","observation_id":"d8472d26-2fc2-4bc8-98d4-21521fce78a8","resolution":{"observed_at":"2026-08-07T05:33:40.693826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:40.809383Z","title":"https://github.com/ joystream/joystream/issues/2969","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:40.809383Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:509b4047ce12b4673664ae2341ff7cf275b24924ada067488b090c7b8cbaea32","observation_id":"bc24dc12-c1ff-48e0-b9e5-890be0515805","resolution":{"observed_at":"2026-08-07T05:33:40.809383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:40.967411Z","title":"https://github","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:40.967411Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:6c04c6b6b2ccf30d2f72ed93473058062061c5dbd0f6fa71caa52f0bb1550716","observation_id":"c47fda32-40d5-44d8-a662-c60963b1bc0f","resolution":{"observed_at":"2026-08-07T05:33:40.967411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.032834Z","title":"https://github","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.032834Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:eaee87756f0d9eca51de6d8faf0039d1a6fc7885c72f34f5e23ee56a6fb553c6","observation_id":"f1ef97b1-b794-40d1-b8cf-9e29aee9d3ff","resolution":{"observed_at":"2026-08-07T05:33:41.032834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.230648Z","title":"https://github.com/ apollographql/apollo-client/issues/3592","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.230648Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:f6a8504436b10a7f309f139277ff0cebef8838ec33177ab7fde47961ab30c988","observation_id":"ad2bcb64-2913-4513-9c19-631092f3c4dd","resolution":{"observed_at":"2026-08-07T05:33:41.230648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.359681Z","title":"https://github.com/ SAP/spartacus/issues/4725","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.359681Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:70d3ffcb95fd4fae567ce9e9452ceebcd9e46b1c9009dd1a6fbb9530e3565450","observation_id":"61b74129-5669-4bb9-90cd-7f7d067a4d98","resolution":{"observed_at":"2026-08-07T05:33:41.359681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.470169Z","title":"https://github","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.470169Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:3ab9ca68e2ec489e3bf7845281ee90b20a0d6c877e1598f647a3ae19254e4a43","observation_id":"dc66e0c8-4811-4631-9b50-8c0d1ea5555b","resolution":{"observed_at":"2026-08-07T05:33:41.470169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.544457Z","title":"https://github.com/ SonarSource/SonarJS/issues/4467","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.544457Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:ec182c0fd7312cd8aba4a680cd7ac76e75074d698cb7c3102c2acec419a4dea9","observation_id":"d8bdad13-d21e-476f-b651-4609f7b99094","resolution":{"observed_at":"2026-08-07T05:33:41.544457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.679658Z","title":"https://github.com/angular/angular/issues/ 37442","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.679658Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:12284ecb67a81959fce9359a2d0cdc8bca5e2f66ff20e2e4dd93dfbe63fc9f1e","observation_id":"1dbc76da-f7a7-43df-8cf8-14897fd1f039","resolution":{"observed_at":"2026-08-07T05:33:41.679658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.808884Z","title":"https://github.com/dotnet/aspnetcore/ issues/54412#issuecomment-1992596067","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.808884Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:258dddea51832f92c55df52024748989a606d54198b309c42f23988e9faab866","observation_id":"69a753ea-c424-4e9a-9e90-cf5e7dd0c117","resolution":{"observed_at":"2026-08-07T05:33:41.808884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:41.942210Z","title":"https://github.com/apache/superset/pull/ 30200","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:41.942210Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:fb951b98e9bcd6f70b6c008c9052c4b0fef1d513b9530a4243af5c986db36727","observation_id":"eacdff1f-bbf8-4a41-86a7-da36d3b3d6b9","resolution":{"observed_at":"2026-08-07T05:33:41.942210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.135728Z","title":"· issue #98 · ollionorg/flow- core","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.135728Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:2f10dfc14b924f01b19de9276c9fd48f66b55c3bc74358c09b7e38d64afd7699","observation_id":"3ba97819-f99b-4f15-9315-c7876b3153ee","resolution":{"observed_at":"2026-08-07T05:33:42.135728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.243303Z","title":"https://docs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.243303Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:e20f880e0786083062914164ab17fd8737d83ba98e374f2dbb30d488c7b43927","observation_id":"7fb9b52f-68ed-481b-89fd-52af4a6051ea","resolution":{"observed_at":"2026-08-07T05:33:42.243303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.368557Z","title":"https://github.com/pulumi/ pulumi-azure-native/issues/2408","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.368557Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:81f1c1f0bfff2cc7bd1c71d646db8804a84b755048e5c10bf51909c30581d52b","observation_id":"b51e31f7-a3e6-4afb-a492-0900e831ce1e","resolution":{"observed_at":"2026-08-07T05:33:42.368557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.520795Z","title":"https: //github.com/grafana/grafana/issues/15591","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.520795Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:bad954e7a0762331ebd8ee1fe176502b99d0893eb0a5c9afea22a1cf8407b34d","observation_id":"f880d0d2-f5dc-4e7a-9a30-282b0175bd26","resolution":{"observed_at":"2026-08-07T05:33:42.520795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.623482Z","title":"nonetype","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.623482Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:bf2c938e3533983c763e966945a7a2ae745a774ffe950e0c00ddbbe6b37f1c74","observation_id":"27c64c69-af44-42d0-95ce-3fcb927f20e4","resolution":{"observed_at":"2026-08-07T05:33:42.623482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.828654Z","title":"https://github.com/ strapi/strapi/issues/12320","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.828654Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:05ae31f9f967c6f4f5856d6921a26928a41d4954594902a75c3c702e050e49be","observation_id":"11d7fd85-76fb-452c-9f0e-5c4aecf07297","resolution":{"observed_at":"2026-08-07T05:33:42.828654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:42.902316Z","title":"https://github.com/ dotnet/aspnetcore/issues/56656","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:42.902316Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:735dc62ead1e082846e00f2afcb37d1ae96ffd458f09c5607969153b4979ba2a","observation_id":"6259b4e5-f6bc-481a-8305-e20c8eb4ff04","resolution":{"observed_at":"2026-08-07T05:33:42.902316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:43.032576Z","title":"https://github.com/pulumi/pulumi/issues/ 8946#issuecomment-1005987646","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.032576Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:2e8978f74fe798146c61d8ec69d5a7618853c2fd5becc4eda8c8e537cf190017","observation_id":"9b645709-4c31-43eb-bae5-39a8d8bca017","resolution":{"observed_at":"2026-08-07T05:33:43.032576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:43.227655Z","title":"https://docs.npmjs.com/ cli/v8/using-npm/registry","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.227655Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:a57948dbf7b630e4cba1fb7ab0bca29a09e86819624ddc242b2f15a5b49ab7bb","observation_id":"1bfa28e9-5b46-4cf8-9ff7-695db8103b05","resolution":{"observed_at":"2026-08-07T05:33:43.227655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:43.360179Z","title":"https://github.com/expo/expo/ issues/19018","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.360179Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:6a642d41f5f44014d3f04ff8293ce93fbb09c2a52ce8bbf03ce43306fe0d34db","observation_id":"01a873f0-9d42-4812-9d65-86b2a65a300d","resolution":{"observed_at":"2026-08-07T05:33:43.360179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:43.398508Z","title":"https://github.com/grafana/ grafana/issues/1619","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.398508Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:3eed90b60710141ea938db22062d56e12f6778ac94efcd08529615219f101c97","observation_id":"1680f08b-3a21-49a0-95e1-59bbb1237f87","resolution":{"observed_at":"2026-08-07T05:33:43.398508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:43.468190Z","title":"https://github.com/ Automattic/wp-calypso/issues/7017","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.468190Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:250fbc9dba75d7be4ba8af67e3b94ac2aff060c90e5f217229febaab74bed27a","observation_id":"10766286-1100-4635-b7a4-aee1b8cfff06","resolution":{"observed_at":"2026-08-07T05:33:43.468190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.106586Z","title":"@storybook/addon-info > marksy > marked","venue":null,"work_id":"62fbdd9a-2d0e-46a8-861f-e5ee84f54296","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.665091Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:22c3166a51a35e1d877ff8c88770d619673959229cfcd0b59a2669a32eae584b","observation_id":"ba42db72-e800-432a-bec9-49119d304507","resolution":{"observed_at":"2026-08-07T05:33:56.108730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.100749Z","title":"https://github","venue":null,"work_id":"9b803b4e-7f6f-41fe-9ccd-963e5e8f8bc2","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.765073Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:e7aeb2b2da830a4974f485886274ab8066644b08f652dd347199e1fdca9532b6","observation_id":"a7e262ff-605f-40ff-a612-ea38e712d847","resolution":{"observed_at":"2026-08-07T05:33:56.102810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.094996Z","title":"https://github","venue":null,"work_id":"70311b10-20be-45a2-939a-13ce5a498c78","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:43.872718Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:1cfedbe4017a821a04e5c37b0bd3a3a7b7b20a870146313573acd7f5409cc4fd","observation_id":"3b25415c-e6b7-4160-9a27-e4ad38c443a7","resolution":{"observed_at":"2026-08-07T05:33:56.097127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.088356Z","title":"https:// github.com/Agoric/agoric-sdk/issues/6071","venue":null,"work_id":"b619a030-22ea-47f1-858d-e76b663e2071","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.038676Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:05f26be20541ae5fa1f52be2dc5c136d3a1d38aeb0650f69e6733c2410d58abc","observation_id":"23fd9574-32d6-4f23-99d9-49e70b0097ec","resolution":{"observed_at":"2026-08-07T05:33:56.090842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.082655Z","title":"https://github","venue":null,"work_id":"782fa888-3fa5-4a74-97d6-91eda3fc8d83","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.184637Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:119dff4f073133639899e961d5a138462d08cf24d7e81d7cccea26578809de52","observation_id":"dec9b6dc-3311-48a6-b45f-cc1b814722b3","resolution":{"observed_at":"2026-08-07T05:33:56.084756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.077005Z","title":"IEEE Press, 2017","venue":null,"work_id":"ebbfea8b-2356-4ea2-9f42-ca8946083aa8","year":2017},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.284820Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:788c8bd0d5580bc8dd903e39f91294644c80bfe72173d31eb12d7588dfb8d7bc","observation_id":"322f2504-ecd7-4c0a-81d7-9198b11b35b5","resolution":{"observed_at":"2026-08-07T05:33:56.078975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.071184Z","title":"Asso- ciation for Computing Machinery","venue":null,"work_id":"fe24ae96-4b16-4397-984d-59d50ee9882b","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.373569Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c561f18c431aed8928f39eee4e78cd09c80e3792ea7ec50c3b0627d5a7c86e5f","observation_id":"41bc1807-a2bc-4d2e-b270-99e44c9b9567","resolution":{"observed_at":"2026-08-07T05:33:56.073277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.065475Z","title":"Gerosa, and Emad Shihab","venue":null,"work_id":"3304db95-27ef-4733-be90-0d246ef05d17","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.488317Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:627d1289e32c3315bb27ccacedfde0ddc07e2087f43691942accb0d17761963f","observation_id":"2fcd1dc3-e327-47e7-a6f1-c3bf32370910","resolution":{"observed_at":"2026-08-07T05:33:56.067426Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.059376Z","title":"Understanding the [cls] token in bert: A com- prehensive guide, 2021","venue":null,"work_id":"190b6ae6-7474-4024-bcdf-d3ca96ac35ad","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.614974Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:1c8f835246939c9fd07853a02a4f1d85c97654b002ff972077122202b49ebbf3","observation_id":"9a4629cf-83f3-4d4b-ac16-50652e4c65f9","resolution":{"observed_at":"2026-08-07T05:33:56.061859Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.053507Z","title":"Optuna: A next- generation hyperparameter optimization framework, 2019","venue":null,"work_id":"8e060592-967a-4820-829e-854dff459922","year":2019},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.721496Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:534fabd0f03c5817ed0152d0a4b526abdffbde41d9d24174fa8a5be671b19ef3","observation_id":"f62a71e1-d269-4e28-9fdc-b1f173b18797","resolution":{"observed_at":"2026-08-07T05:33:56.055784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.047382Z","title":"On the discoverability of npm vul- nerabilities in node.js projects.ACM Trans","venue":null,"work_id":"fd27f576-7900-4fb0-a9a0-54d7467fd75d","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.839739Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:cc806203191f0fcd69fe3747974b7f64617ff6fdc13494d012c60b38cfc4496d","observation_id":"c3c257a0-13a7-414d-9153-fa01e085b11e","resolution":{"observed_at":"2026-08-07T05:33:56.049572Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T05:33:44.987784Z","title":"Qwen tech- nical report.arXiv preprint arXiv:2309.16609, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:44.987784Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:672e4fa854480d027ca6c6797d49dfa44f24154dc700cb75980586592d4b6cb5","observation_id":"635f233a-c43c-46dc-98e4-111eb95cac53","resolution":{"observed_at":"2026-08-07T05:33:44.987784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.041181Z","title":"Buck and Devon F","venue":null,"work_id":"42bcb3a9-845f-4ef4-a933-f6bc10dfcf97","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.072567Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:86b98dfce0686cdcb0a644c34bdd9d8c3a9107100b3680fbb0ca4a179f01c12c","observation_id":"08fd54a4-1c98-47d6-9662-ddb0a986b92f","resolution":{"observed_at":"2026-08-07T05:33:56.043195Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.035309Z","title":null,"venue":null,"work_id":"8cdd9f8b-2cb3-4c15-b7af-455c3b8138ee","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.173300Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:2f368a21db7ea622db78fff22158e454308654c97338dabb91514360a82084e3","observation_id":"f53cb871-aa76-44ba-92ac-810dfe1df99a","resolution":{"observed_at":"2026-08-07T05:33:56.037431Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.029097Z","title":"Exploring the use of labels to categorize issues in open-source software projects","venue":null,"work_id":"269005bd-0d7a-463c-9471-04c65db673d7","year":2015},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.308713Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:6dec2af5d04ed07f93e5a6cce97b17df34ab3e0b39530b85c17d8725f6cf03e8","observation_id":"89fda9f7-ad84-49ab-857f-ae11e1f286f2","resolution":{"observed_at":"2026-08-07T05:33:56.031670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.022851Z","title":"Chi, Jeff Dean, Jacob Devlin, Adam Roberts, Denny Zhou, Quoc V","venue":null,"work_id":"b008fe1d-d00e-4460-9c4a-779eedeaf52b","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.454578Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:aa421f1d188fba208e76f4e22c4b3abfaab5370d3bbae0347c9b2dc1e2eb09fa","observation_id":"2ef43184-b32b-4cb2-ab0c-13dbfbf971f0","resolution":{"observed_at":"2026-08-07T05:33:56.025158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.016872Z","title":"Ali Babar","venue":null,"work_id":"6f9ae10b-037c-4d08-a08f-2e841b59d558","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.563758Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:d60388447ce0db859838b644af82f387b684eb627be70152dca6e39f6ede0b49","observation_id":"0c34843e-6d03-4b28-bbb4-0b82b4983748","resolution":{"observed_at":"2026-08-07T05:33:56.019022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.010350Z","title":"An em- pirical study of blockchain repositories in github","venue":null,"work_id":"4a3d3ec8-9cd1-45e2-ad12-3a90f067b0af","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.751625Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:519fff2dcd106ea33d1f96809f9bb42a901596fb34087c766be1e5adab4c7638","observation_id":"09a94795-3325-4462-9fe0-1e57a46df3f0","resolution":{"observed_at":"2026-08-07T05:33:56.012804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:56.004308Z","title":"On the impact of security vulnerabilities in the npm package dependency network","venue":null,"work_id":"fd5714bd-4700-49a4-97ab-bbb57c9696f4","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.886499Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:e33d2c0ebe955038895b88058a289a2054c6c93ebd0898498142f26dd93188d2","observation_id":"b9e33353-77ba-44ef-9af2-43289c6fe664","resolution":{"observed_at":"2026-08-07T05:33:56.006648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.998093Z","title":"An empirical comparison of dependency network evo- lution in seven software packaging ecosystems.Em- pirical Software Engineering, 24:381–416, 2019","venue":null,"work_id":"01c5fb84-3d64-48e5-953c-6b32be313ef6","year":2019},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:45.990722Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:5e8a2986a1f4fd173c913e90ba4a2da83e6c161f920fde7e03c4173228590454","observation_id":"cecc590e-8b6e-477e-b266-ce9259cd030e","resolution":{"observed_at":"2026-08-07T05:33:56.000506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.991885Z","title":"On the use of github actions in software development repositories","venue":null,"work_id":"c492bf48-efad-44ae-a98a-2ddc2f68e189","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.145636Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c65a27816d2c2af0cc8c192f237981f0af347d08990525a13dfbd612d58db8d7","observation_id":"fd97cb79-6632-4e80-adc4-a8e8e87e9a7d","resolution":{"observed_at":"2026-08-07T05:33:55.994312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.985773Z","title":"On measuring affects of github issues’ commenters","venue":null,"work_id":"75c9dbb0-6765-4628-999f-f2c91b7635da","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.257610Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:21b1575a56c5032d4d720c987a44093ffaf596f1bb39a8e5afa38cd0a6e85d28","observation_id":"6c7af539-2118-4852-bc76-30879fde8b11","resolution":{"observed_at":"2026-08-07T05:33:55.988146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-07T05:33:46.400805Z","title":"Bert: Pre-training of deep bidirec- tional transformers for language understanding.arXiv preprint arXiv:1810.04805, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.400805Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:a0eeecea89465e4d55b996c59cdffd76bfef233f5959c4623a252070a552e24c","observation_id":"e73190ed-3068-46d3-b61b-66c64d255fe9","resolution":{"observed_at":"2026-08-07T05:33:46.400805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.979044Z","title":"Detecting and characterizing bots that com- mit code","venue":null,"work_id":"140f74c1-f311-47f3-82ab-0d6760fdccfa","year":2020},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.488842Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:4582d37b3603345cb0b5826dc32206aad50b072b8c2a98c3ea1df6375998371c","observation_id":"72af73da-db9c-49cc-92ca-49e90febca14","resolution":{"observed_at":"2026-08-07T05:33:55.981558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.972548Z","title":"Diniz, Daniel Cruz, Fabio Ferreira, Cleiton Tavares, and Eduardo Figueiredo","venue":null,"work_id":"d4006298-16cf-4667-933a-d535b997caf4","year":2020},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.640949Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:6800a62a420141cc1695d2136c5340e9bd5a9a6222294aa2237d99446bbd4e7f","observation_id":"4ae2afcf-9b56-47ed-b4cd-e72a76379242","resolution":{"observed_at":"2026-08-07T05:33:55.974938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.966590Z","title":"Managing labels","venue":null,"work_id":"f0d24d4d-ab80-41b8-ac05-5a31fe653040","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.802555Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c487e9351669d07bd28ef25bb3ccaf2dc8eb1b6f3c168ad45442cee56e65f76d","observation_id":"b77e9946-aef8-4b40-99d1-e5e6461d52c6","resolution":{"observed_at":"2026-08-07T05:33:55.968672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.960127Z","title":"Ethical issues in qualitative research on internet communities.BMJ, 323(7321):1103–1105, 2001","venue":null,"work_id":"335f5f32-0fd0-49a5-ae98-763d199541ee","year":2001},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.862581Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:3c8f3927c8603588053bed1bf33da3b13fcccfc41bfc75d176c11f44f8b2138f","observation_id":"3a750f92-8ddd-41de-b155-bd506b76d32c","resolution":{"observed_at":"2026-08-07T05:33:55.962767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.08155","last_updated":"2020-09-18T15:38:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-02-19T13:09:07Z","title":"CodeBERT: A Pre-Trained Model for Programming and Natural Languages","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.08155","snapshot_observed_at":"2026-08-07T05:33:46.969767Z","title":"Codebert: A pre-trained model for programming and natural languages.arXiv preprint arXiv:2002.08155, 2020","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:46.969767Z"},"links":{"cited_paper":"/paper/2002.08155","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:7dd1e0414c29eeb92bb924562c448214d5da3adab1719b74d5ee63e1eb9a0a56","observation_id":"fc1e8a38-5bce-463a-9a68-d9a552707b59","resolution":{"observed_at":"2026-08-07T05:33:46.969767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.953689Z","title":"Containing malicious package up- dates in npm with a lightweight permission system","venue":null,"work_id":"494dcbe3-d3cb-4e44-9731-3f1905354c9a","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.071476Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:2aa05c02ba44dbbf47dd41b7f50ca9590f896a09918e10eb01c89546ecee98ca","observation_id":"cb226e63-1368-46f2-9079-897f62a88e32","resolution":{"observed_at":"2026-08-07T05:33:55.955909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.947671Z","title":"Codeql: Semantic code analysis engine","venue":null,"work_id":"0d8833e8-e8d3-411a-82de-fb6f8873c759","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.202665Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:d816153db7f5de5425d27282f6098bd6c73009cb86fa6988d7e2f3e4feef4511","observation_id":"eaeac2b9-8420-4b8e-bf61-bfa0187fede3","resolution":{"observed_at":"2026-08-07T05:33:55.950016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.941301Z","title":"Dependabot: Keep your dependencies up to date.https://github.com/dependabot","venue":null,"work_id":"6e369643-34c5-4c99-8444-c22b35989a58","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.304745Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:b138d71c8ecf4f5dbf2a4170aeed5e842c0ffc14996af7fb6280b402de991ad0","observation_id":"473df1d7-a8ec-455a-91fe-f9eaf7997b16","resolution":{"observed_at":"2026-08-07T05:33:55.943727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.935228Z","title":"Github marketplace","venue":null,"work_id":"fae69a39-ac08-4c2c-9246-781d5f6d25b2","year":2017},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.408586Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:184de368da5e7e182f95c1a11a09844be6a1c82213c5c59de3cbe06ed770cbf2","observation_id":"ca47ba53-0daa-4b38-805b-2ba6fd31a318","resolution":{"observed_at":"2026-08-07T05:33:55.937407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.928434Z","title":"Privately reporting a security vulnerability","venue":null,"work_id":"11dab573-b630-41e7-9456-a948ca7d76ee","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.573750Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:af3e33c7806605a658099dec5019b3e5b802c34908da40dcb711a17ca2195fe2","observation_id":"8e89d3da-bfab-4b70-8572-3e7eb1001745","resolution":{"observed_at":"2026-08-07T05:33:55.930898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.922351Z","title":"A ground-truth dataset and clas- sification model for detecting bots in github issue and pr comments.Journal of Systems and Software, 175:110911, 2021","venue":null,"work_id":"92b043df-ebda-4b09-92fa-95426c41df1c","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.732591Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:f681fe20341f33e2582d07191213cd342f310867d67e496d4f5ed71d5b841689","observation_id":"4bb5d245-10e0-4f20-9096-f05eb0befda4","resolution":{"observed_at":"2026-08-07T05:33:55.924579Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.916305Z","title":"Recogniz- ing bot activity in collaborative software development","venue":null,"work_id":"b931a1b4-ec65-4c05-9421-a63051e41946","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:47.912619Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c00381ac70046578961965f4fc55c1c07144a82f33e52c844e587c8ed49d48e5","observation_id":"2fdef1f8-179b-480d-9370-f6e01eca5822","resolution":{"observed_at":"2026-08-07T05:33:55.918734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.909844Z","title":"Outside the comfort zone: Analysing llm capabilities in software vulnerability detection","venue":null,"work_id":"9d94009d-31c7-48bd-b73c-d6aca0336170","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.068459Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:3e2793e3b45528c2e19459b9111c20a430af8261a80ab7629f2a512897244f52","observation_id":"ebab792d-e57b-4f6f-b456-db0c596b2a55","resolution":{"observed_at":"2026-08-07T05:33:55.912490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.903941Z","title":null,"venue":null,"work_id":"767de847-1eae-4cb4-87c3-2e26bd64996c","year":2015},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.213502Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:cf002027db7c08a823bf6e36b87ab491deac987b3bd3ab814f0462b6c9ce013e","observation_id":"b8bf9321-6325-49e4-864d-46803c4c62a1","resolution":{"observed_at":"2026-08-07T05:33:55.905908Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.03654","last_updated":"2021-10-06T21:02:00Z","snapshot_observed_at":"2026-07-06T09:26:29.068023Z","submitted_at":"2020-06-05T19:54:34Z","title":"DeBERTa: Decoding-enhanced BERT with Disentangled Attention","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.03654","snapshot_observed_at":"2026-08-07T05:33:48.367840Z","title":"Deberta: Decoding-enhanced bert with disentangled attention.arXiv preprint arXiv:2006.03654, 2020","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.367840Z"},"links":{"cited_paper":"/paper/2006.03654","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:0f70ca2dbfa977abbee61227bf044cf890e678f816e455c7df587db404071e80","observation_id":"878cfebf-5f4a-420c-972f-1578cfde4f34","resolution":{"observed_at":"2026-08-07T05:33:48.367840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.896675Z","title":"Empirical analysis of vul- nerabilities life cycle in golang ecosystem","venue":null,"work_id":"9fdc5b55-c928-4fd1-a1d1-9d6fea8d2d18","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.486345Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:ca1fd99983804cedafe9bccc4830b79301f5f49a23eb3de54d7d926e89240f13","observation_id":"23252ee7-7292-4bdf-a5a3-bbf485dd3df7","resolution":{"observed_at":"2026-08-07T05:33:55.899358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.889390Z","title":"Spiderscan: Practical detection of malicious npm packages based on graph-based behav- ior modeling and matching","venue":null,"work_id":"85ca5d42-e6a0-4c79-9099-22483de69465","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.652186Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:35bd5366304a6197e2d9ea458dd707f6b6e94f4fc89a25b415fa1e20926de8ef","observation_id":"a0c2221a-49a1-4648-954b-52f4a56847bf","resolution":{"observed_at":"2026-08-07T05:33:55.891925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T05:33:48.799910Z","title":"Mistral 7b.arXiv preprint arXiv:2310.06825, 2023","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.799910Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:99456d1c0c2e9447a5b0006b858eaf67ef9b2e4d3bfc3012c30e8cccdc51bdef","observation_id":"b84577b2-e441-4d75-b8c3-ebf341f0046d","resolution":{"observed_at":"2026-08-07T05:33:48.799910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.881777Z","title":"Recommending tags for pull requests in github.Infor- mation and Software Technology, 129:106394, 2021","venue":null,"work_id":"554ac920-e23b-4bb8-bd3f-3e8326cafff8","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:48.919792Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:e75867e42af7b1fbe21e0871129b825fae5592141fc5c6363d31a872ee15b1ae","observation_id":"99ac1fd1-3682-4873-b282-89ebd9e2d90a","resolution":{"observed_at":"2026-08-07T05:33:55.884544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.872748Z","title":"What is a minimal reproducible example (mre)? https://label.dev/ articles/minimal-reproducible-example/ #what-is-a-mre, 2023","venue":null,"work_id":"4ac7d267-2536-475f-bcf6-ff91fcbe5007","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.030892Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:9cbe6a16a3a4558e785ff6d06790ea79a4c1a9f718d3bdf1fa170f8f77c7a164","observation_id":"f9f8b1c0-910c-4b05-ae94-1707240fc76e","resolution":{"observed_at":"2026-08-07T05:33:55.876362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.863426Z","title":"On the feasibility of cross-language detection of malicious packages in npm and pypi","venue":null,"work_id":"b2666d14-fbc8-4789-9766-20a648abc7fd","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.224868Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:d9b6ab1fd76597288bae52da3fa46ad3bf08470c0231489059541c8b9997342e","observation_id":"c97d17b1-988d-4e1b-93f1-d9edd960036e","resolution":{"observed_at":"2026-08-07T05:33:55.866291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.855846Z","title":"Software bots.IEEE Software, 35(1):18–23, 2018","venue":null,"work_id":"aee6b904-3030-428c-95b9-9fc432a993b0","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.381085Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:35945b839c00bf05c4acfcfbf76b50567e387f5dd64743150bba6df77de74243","observation_id":"0d79e2c1-bcd8-47e9-914a-aa9f505084b0","resolution":{"observed_at":"2026-08-07T05:33:55.858780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.847126Z","title":"Patchfinder: A two-phase approach to security patch tracing for disclosed vulnerabilities in open-source software","venue":null,"work_id":"0b707e36-7804-4535-82ad-c4aaadfb2b6e","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.576920Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:693a42b13136dd1dd4fde5e702492ee3db8acb6323e0fb307962b81a653cc672","observation_id":"7d51859a-e6bd-4052-87fd-a4231d0c2f48","resolution":{"observed_at":"2026-08-07T05:33:55.850125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.838938Z","title":"Code of conduct conversations in open source software projects on github.Proc","venue":null,"work_id":"ba8a2d77-f61b-4ba2-976d-59a7eb49785f","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.755061Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:10677331b0b70ac99840bdddf37f4eedd7267a3c8ea646ae17f45e9450cbc607","observation_id":"f0bbe85f-0557-4483-aed3-54035e470434","resolution":{"observed_at":"2026-08-07T05:33:55.841628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.831309Z","title":"Demystifying the vulnera- bility propagation and its evolution via dependency trees in the npm ecosystem","venue":null,"work_id":"8986e46f-5ca7-4d35-868f-4ad90d1cb15a","year":null},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:49.909943Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:d1a72c554c962ad532480afc6fabc42679986a59b9285333764399110f628c6c","observation_id":"e06c16d6-0eb2-4c89-acdb-eaa7cccaf646","resolution":{"observed_at":"2026-08-07T05:33:55.833929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-07-31T22:31:37.910868Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-07T05:33:50.157302Z","title":"Roberta: A robustly optimized bert pre- training approach.arXiv preprint arXiv:1907.11692, 364, 2019","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.157302Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:875ff4297456f20660783e370c269443618e47810bc0e481bc3f2f626148d57a","observation_id":"00d5e7a0-05a8-4351-bf81-501616a8a79f","resolution":{"observed_at":"2026-08-07T05:33:50.157302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.819386Z","title":"Sane github labels","venue":null,"work_id":"2f21ebee-78f0-4f13-8dbb-201e5290cbed","year":2016},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.317893Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:d97af4dbd569987fbf570fc28867993ef5d2ccf3e607c7a72a73c76b1da7a1e8","observation_id":"b7eccaff-5f25-4755-9252-4c866d9d5fab","resolution":{"observed_at":"2026-08-07T05:33:55.821601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.811992Z","title":null,"venue":null,"work_id":"c51f40fc-f006-4644-8f23-adfed7858be6","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.483909Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:98bc94abcc9ad88a1d25b2ec37cc15cc4bc102ea0af06a4f7d50db0c10e9182b","observation_id":"dff7aabe-56ee-4db3-bc4d-f23e25cf128c","resolution":{"observed_at":"2026-08-07T05:33:55.814414Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.803568Z","title":null,"venue":null,"work_id":"c868019e-fc05-4ce6-8c74-5292d9954031","year":2017},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.561056Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:6b5590b42bb032154a9b2af2c454ac2b8875d4e1134f00a0b28a1a4063b70c93","observation_id":"c7e3e73a-f3ab-4f63-8301-48d0a20d1cef","resolution":{"observed_at":"2026-08-07T05:33:55.806209Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.796280Z","title":"npm: The package manager for javascript","venue":null,"work_id":"e7372020-d223-42b2-97a5-36d694cf7c8a","year":2010},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.712423Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:1f7c836bd7bb4cc0198b50da5632f6b45580c1d4db2f65dfaa5c6e019fd8bdde","observation_id":"faad80cd-1a00-4403-aa70-343a0ffe363d","resolution":{"observed_at":"2026-08-07T05:33:55.798691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.788421Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks","venue":null,"work_id":"e42b5e80-992a-4372-9957-52fdee7d2394","year":2020},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:50.868197Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:154bdb6ef3a621dc167de6a25fc82a6af674a28d9ec05cc194e74cbfd5bd0409","observation_id":"d9125eb3-fb17-4511-a584-8d043eef40eb","resolution":{"observed_at":"2026-08-07T05:33:55.790780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.781294Z","title":"Oliveira, Ana Flávia C","venue":null,"work_id":"df6111dd-92a0-442a-a7d5-11edfa58f7ae","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.011949Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:42514d34e8b7d7dcaf5a4e34cdff3e616cd1f2d762c1c75411b82e37947420a5","observation_id":"17a87a0b-e3d5-495f-9e39-aa04bf5e065f","resolution":{"observed_at":"2026-08-07T05:33:55.783786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.773821Z","title":"Santosa, Asankhaya Sharma, and David Lo","venue":null,"work_id":"5f1649ee-5d05-4871-bf1a-632a7b3c2f75","year":2021},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.121967Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:611d736911c58fb655f834e9cca6b503a2eaf9a84f77302b6cbf80925c093ade","observation_id":"cdd9ba92-7bde-4a93-aefe-299705b5631d","resolution":{"observed_at":"2026-08-07T05:33:55.776196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.765383Z","title":"i just hated it and i want my money back","venue":null,"work_id":"342d3bdd-6725-4199-9052-3be68a2e5241","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.235937Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:f633a0e40ba3ae203d0d77b343d80321269c66fa733f17f639f00ee8898744a5","observation_id":"a98a9f96-fa3d-4196-805e-ae8d359a98af","resolution":{"observed_at":"2026-08-07T05:33:55.768382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.757994Z","title":"Minimal bug reports","venue":null,"work_id":"0506800f-cd54-46d4-85e2-c167fb8d261b","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.341165Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:56a770be80df9b0ea1b354237cfe0332acc73678c1005f76be3293354b6b7c92","observation_id":"9e1e3d85-7f1e-4793-9422-a412b77cc198","resolution":{"observed_at":"2026-08-07T05:33:55.760687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.750438Z","title":"SAGE Publications, London, England, 3rd edition, 2015","venue":null,"work_id":"d2e0911f-5a30-42a5-81ca-a85215ae1b0b","year":2015},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.464104Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:83b476fd19c4883c1c9b8ada716edfaaf3563fe525db0330753c04394c7d6b14","observation_id":"6af937e7-7fa2-482b-a994-c779a309d029","resolution":{"observed_at":"2026-08-07T05:33:55.753099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.742749Z","title":"Saturation in qualitative research: exploring its conceptualization and opera- tionalization.Quality & quantity, 52:1893–1907, 2018","venue":null,"work_id":"0be0e30e-3a94-468e-b5a3-cf710c828299","year":1907},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.525876Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:b944c28d55dc2d1dfd36f850d14a27cf1aad2c6e77f44acd82bcdafa4daff804","observation_id":"588ff141-1387-4472-9301-c274c6459b79","resolution":{"observed_at":"2026-08-07T05:33:55.745387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.734388Z","title":"Practical automated detection of malicious npm packages","venue":null,"work_id":"255aad9d-a12b-47e8-a124-847fd17c957e","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.683088Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:c760f73d8a1ad992cb73f1192422a87fa2184f0d3b0c53b2d4ffe7756ee8a9e6","observation_id":"c01bff76-e723-48dc-898d-54c95bc841cf","resolution":{"observed_at":"2026-08-07T05:33:55.738232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.725571Z","title":"Do users change their settings? https://archive.uie.com/brainsparks/2011/ 09/14/do-users-change-their-settings/ , 2011","venue":null,"work_id":"0d516b32-678c-4ffc-a4f5-663f50cdc67b","year":2011},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.832155Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:ad1f246fe50e10de7d40936b7ddc20a3cc65ee0126d6fbdf20085198202c7a47","observation_id":"3ea031ab-3424-4a8b-a60e-5a02030eca5e","resolution":{"observed_at":"2026-08-07T05:33:55.729931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.718430Z","title":"Dis- rupting developer productivity one bot at a time","venue":null,"work_id":"86b3cd78-34c7-41b3-a681-e4a98851c230","year":2016},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:51.924451Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:921792d532dd9b5dcfa28bda09bc7b775b497062f36ed75ca61e83a368d08236","observation_id":"b38c20d4-5aa2-4027-9117-23c5e282310e","resolution":{"observed_at":"2026-08-07T05:33:55.721036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.710912Z","title":"A first look at good first issues on github","venue":null,"work_id":"ea81c9d4-37bb-4708-bdbb-cb8d1d311656","year":2020},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.072359Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:0363a6fb0e1e738c0df50f1b8a87e20cc37218ceab2cdb7755c6c75e31988c61","observation_id":"b1f857ad-e140-4b99-a733-9574ba3ddf25","resolution":{"observed_at":"2026-08-07T05:33:55.713361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.08295","last_updated":"2024-04-16T12:52:47Z","snapshot_observed_at":"2026-08-03T03:29:01.959523Z","submitted_at":"2024-03-13T06:59:16Z","title":"Gemma: Open Models Based on Gemini Research and Technology","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.08295","snapshot_observed_at":"2026-08-07T05:33:52.218622Z","title":"Gemma: Open models based on gemini research and technology.arXiv preprint arXiv:2403.08295, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.218622Z"},"links":{"cited_paper":"/paper/2403.08295","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:f0055a4655588d9ed1c4066561abbded07b375d4a68ae520fdc1399d08bdda38","observation_id":"e720257f-9b9f-430d-b952-04f96a80bd09","resolution":{"observed_at":"2026-08-07T05:33:52.218622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-07T05:33:52.352113Z","title":"Llama: Open and efficient foundation language models.arXiv preprint arXiv:2302.13971, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.352113Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:fa8782014f234306c606d77411fc9b562785f8a284d81d3fd97d82c25f9bb46c","observation_id":"dedc4b02-26ef-44b2-8d95-e91da175f6d8","resolution":{"observed_at":"2026-08-07T05:33:52.352113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.702874Z","title":"Github’s dependabot is caus- ing a ton of “spam” in our frontend (angular) reposit","venue":null,"work_id":"be99d77a-6386-4826-b039-be7116d1f2ad","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.519258Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:f957e3eed62dc66191ac7dfbf4d426414e9b7eb213b9f8d6cacf0f9beae92c75","observation_id":"5643c444-6b78-4331-be52-2318dcad98a8","resolution":{"observed_at":"2026-08-07T05:33:55.706052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.691126Z","title":"Honestly dependabot is so bad i’m surprised anything other than the smallest pro","venue":null,"work_id":"685b9fac-b7df-4c70-9835-0a9103f3864d","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.616542Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:7051731394a49a5e0ac97f121b17b12076286a71bedabb226508df5799082cc9","observation_id":"ea3a15eb-7007-4ccc-981c-95f7af098d08","resolution":{"observed_at":"2026-08-07T05:33:55.698205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.577568Z","title":"Mapping user preference to privacy default settings.ACM Trans","venue":null,"work_id":"d535a529-4f64-43a5-8864-e6b007786c02","year":2015},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.717151Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:9762f9ffa647017dddd421800fc738b0e09b6b7c90000b638e4835059e6c69bb","observation_id":"2c009e3e-aa38-4e28-88b5-3598cb55e33f","resolution":{"observed_at":"2026-08-07T05:33:55.663134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.338808Z","title":"Wiese, Ivanilton Polato, Ana Paula Chaves, and Marco A","venue":null,"work_id":"81c79563-248f-4f98-a233-99db64a5c02a","year":2018},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:52.982932Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:14e1939d7eaff17c65159e87210a7ecf7ae5b727d465ab1b6c3a314ebab65cf2","observation_id":"2c14f2fd-cc2c-48c0-ba5d-f79f6840fe0b","resolution":{"observed_at":"2026-08-07T05:33:55.470568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:55.108403Z","title":"The inconve- nient side of software bots on pull requests","venue":null,"work_id":"45c4dc33-7cdf-4c01-a3ea-c3afd2c5f1e4","year":2020},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:53.103223Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:283579eadae9280ecb186d50cf028767e04c6acd9347bb6fcb91be22215dc800","observation_id":"a2ae0995-9f08-4da7-89f6-fc9c417350d4","resolution":{"observed_at":"2026-08-07T05:33:55.217544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:54.868908Z","title":"Identifying affected libraries and their ecosystems for open source software vulnerabil- ities","venue":null,"work_id":"5c7f06b8-9689-4594-abbf-678b10827aa8","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:53.241071Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:8dc84f65c97a65f9bdb8520b6c0cc74ce78b159751b65fc4045fed9cf6d945fd","observation_id":"1c82b62f-2b70-4b35-87f0-3ed5b4ec89d2","resolution":{"observed_at":"2026-08-07T05:33:54.967096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:54.646050Z","title":"Understanding the threats of up- stream vulnerabilities to downstream projects in the maven ecosystem","venue":null,"work_id":"24038cec-bd3e-4880-a599-d6eb603718ff","year":2023},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:53.302241Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:936c929728dc8a7cc959ad0acf7ce578151b8135db3f8fbca5b80281003c875a","observation_id":"fbaaa7e1-7b27-46e5-ba11-95f6e5153dbd","resolution":{"observed_at":"2026-08-07T05:33:54.742127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:54.483405Z","title":"Maltracker: A fine-grained npm malware tracker copi- loted by llm-enhanced dataset","venue":null,"work_id":"3cbf43d3-3990-4d70-8433-9431422eb786","year":2024},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:53.376117Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:8cb0746eac0ef76797c2084aba5fe4366fe8f2a2b7bd8d38b7a9b2ff82f3d7ce","observation_id":"f0466062-d793-4ee7-9141-295d0aad1673","resolution":{"observed_at":"2026-08-07T05:33:54.549834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:33:54.292240Z","title":"On the impact of security vulnerabilities in the npm and rubygems dependency networks.Empirical Software Engineering, 27(107), 2022","venue":null,"work_id":"cf736e86-4af5-418d-8f45-358747696433","year":2022},"citing_paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-07T05:33:53.416062Z"},"links":{"citing_paper":"/paper/2506.07728"},"observation_digest":"sha256:e9da036a43942a98e0f6e8a0046f8e4e15adbf98f9792e8341e394b052a6ecf2","observation_id":"0d1e4e24-b3a9-4b56-803a-73d047591815","resolution":{"observed_at":"2026-08-07T05:33:54.387180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07728","last_updated":"2025-06-09T13:11:35Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:24:43.093602Z","submitted_at":"2025-06-09T13:11:35Z","title":"\"I wasn't sure if this is indeed a security risk\": Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":0,"verified_fuzzy":63},"total_outbound_references":105},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 100 of 105 outbound references and 0 inbound Pith citation observations for arXiv:2506.07728."}