{"as_of":"2026-08-07T17:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa6fa6955136457cba94fa008462e90ba4f4cc08fedafe3cf4e067d094769d40","coverage":[{"denominator":80,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":80,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:41:18.741692Z","state":"measured"},{"denominator":81,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":81,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:31:17.975540Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T00:31:19.886341Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"cited_work":{"arxiv_id":"2506.12995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.12995","snapshot_observed_at":"2026-08-06T00:31:19.886341Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","venue":"cs.CR","work_id":"2b2bdc7f-6c5d-4578-afd8-12c31fc16123","year":2025},"citing_paper":{"arxiv_id":"2608.02669","last_updated":"2026-08-02T13:57:28Z","snapshot_observed_at":"2026-08-07T17:20:37.025510Z","submitted_at":"2026-08-02T13:57:28Z","title":"Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T00:31:17.975540Z"},"links":{"cited_paper":"/paper/2506.12995","citing_paper":"/paper/2608.02669"},"observation_digest":"sha256:e2e88a0b2829bd484b6991047a2982cf20849561f75226b145d87d537cde4079","observation_id":"5b13c0ec-fa79-46e3-a1e0-51d50cbe5c89","resolution":{"observed_at":"2026-08-06T00:31:19.938494Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.12995/citation-record","integrity":"/paper/2506.12995/integrity","json":"/paper/2506.12995/citation-record.json","paper":"/paper/2506.12995"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.249759Z","title":"As- apy: A python library for aerospace simulation analysis,","venue":null,"work_id":"1964d113-14f9-47aa-b481-19265ef5cfcd","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.391419Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7a69ef8610a8aad9b11c81cb5d4169d1d1f39ef4adb2f942c65c9d28b73f3c3e","observation_id":"ae68133b-e5ea-45d2-bb5b-d712bacc2f99","resolution":{"observed_at":"2026-08-07T00:41:20.254582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.235134Z","title":"A comprehensive review of cyber-attacks and defense mechanisms for improving security in smart grid en- ergy systems: Past, present and future,","venue":null,"work_id":"e009254b-2862-4b33-a7f2-5f157aeb4b6f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.478313Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:102356105ee5428df0af70af33c18a1c11e74bc0f2c048442bb7d4d2f9035d11","observation_id":"43dcde1f-e298-42d1-9075-9dde4bb1adc0","resolution":{"observed_at":"2026-08-07T00:41:20.240263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.220204Z","title":"Formation control method based on artificial potential fields for aircraft flight simulation,","venue":null,"work_id":"9b32f33c-b10b-4248-8a67-01c02ac84568","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.613314Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:99c270be004e6f7d752f4318a3f4857e5daaafb435c704efac85f1d010aeef72","observation_id":"d5e403b9-6522-4cb5-aed6-2b3b416ebbaa","resolution":{"observed_at":"2026-08-07T00:41:20.225801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.205590Z","title":"Open source soft- ware and global entrepreneurship,","venue":null,"work_id":"06f93e8d-01a3-4748-9fd8-037efe1bcfa4","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.694678Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:87dd8ae20a9d73b34c2396f7a5754320632200f506185c013be86e4341ba8f72","observation_id":"1027d3e8-c8d3-48e3-a4d4-c1e0fb7a86cb","resolution":{"observed_at":"2026-08-07T00:41:20.210324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:15.817244Z","title":"Fingpt: Open- source financial large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.817244Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f421b2881e3351e4e667840d82af57f627f781a9d91e268aa81724b7b44a3e0f","observation_id":"976373d7-feb5-498d-b9e5-f5985fd785fd","resolution":{"observed_at":"2026-08-07T00:41:15.817244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.190333Z","title":"Improving uptake of simulation in healthcare: User-driven development of an open-source tool for modelling patient flow,","venue":null,"work_id":"6bd45d80-1107-48be-9fe9-c4269fd9c8eb","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:15.932060Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7792c136894ab3b7826651a5eff12dc6f260162a18788915c85fbfac8dc16c56","observation_id":"274a5120-5d37-47f9-a495-30c0483ea848","resolution":{"observed_at":"2026-08-07T00:41:20.195515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.176173Z","title":"Open source development: A double-edged sword,","venue":null,"work_id":"6ade051e-86a9-41a9-9de3-3728cc56fe2c","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.036048Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a48b59915489b1acb301c7d9dc5e33ac5e10d65943d206777a8780f7f5880b7d","observation_id":"df7cbab4-0dd6-4263-aec2-62d87431b68d","resolution":{"observed_at":"2026-08-07T00:41:20.180371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.161160Z","title":"Impact of using open source software on cyberse- curity,","venue":null,"work_id":"fa02d497-13cc-4eae-b28e-6dd2054b60a2","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.157152Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:75e20f10ce59ba3990cfc9c65f9b260d0204e143020f79e0f6384ee18d1e8b70","observation_id":"9fdfc375-7e45-48b3-9118-b47296ff5782","resolution":{"observed_at":"2026-08-07T00:41:20.166617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.144736Z","title":"27 malicious pypi packages with info- stealing capabilities discovered,","venue":null,"work_id":"2c2b873e-4b3e-45bc-bb51-13c492133671","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.274147Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7898807f6f261d029b234373393e46cbff34136bab01dba4a474c5ebdc194501","observation_id":"c6973a6f-42bd-40c2-9f23-dd12c4a5724f","resolution":{"observed_at":"2026-08-07T00:41:20.149657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.129317Z","title":"The hidden economy of open source software,","venue":null,"work_id":"5226123f-a7b3-4042-bf96-2fa383f99282","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.367592Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:26f21c1423b8719540bbf077951a816fb1663ec10bd156481292d65b2b1887fd","observation_id":"a9b0eb19-5827-4e9a-820e-b35cbc440795","resolution":{"observed_at":"2026-08-07T00:41:20.134558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.114139Z","title":"Dozens of npm packages caught attempting to deploy reverse shell,","venue":null,"work_id":"2afee9c4-adfc-47fd-8685-95341ddd9ce7","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.482235Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f3d256a92ab374d08766eb1810243b5a606997b4b0dcd8727e86203e01ad0ecb","observation_id":"a49cbc08-fea9-4f07-80ac-80ac3ab4a3b7","resolution":{"observed_at":"2026-08-07T00:41:20.119693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.099044Z","title":"Hundreds of malicious python packages found stealing sensitive data,","venue":null,"work_id":"788f2945-a19a-4ee9-9312-d18881851b59","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.599845Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:96285885b747a50d9505777a16a4807042b4d499c0077a4b4778c3db4273d91d","observation_id":"737c72ec-5921-480a-aaf2-fee0dc79e823","resolution":{"observed_at":"2026-08-07T00:41:20.103553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.084188Z","title":"Securing open source software act","venue":null,"work_id":"b9a1d35e-25df-400a-8adb-b2442293922a","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.738793Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:48ae949702b5b33b0b290e9712f43f2434b38ed7e022382d791af3818ea5aeb7","observation_id":"30f7f07b-caf3-499a-b451-24b3fb21d327","resolution":{"observed_at":"2026-08-07T00:41:20.088767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.069212Z","title":"Summary of the 2023 request for information on open source software security","venue":null,"work_id":"ed157303-3e96-4460-b7e9-af1803bc921a","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.899241Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:52de129d4c3173118bcaa22bad90a1358e8cab4ee23fde099894968c184284af","observation_id":"afcfe3a7-cbb8-4f34-b711-a172ef9ec48c","resolution":{"observed_at":"2026-08-07T00:41:20.074844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.051695Z","title":"Cisa open source software security roadmap","venue":null,"work_id":"32a00d28-48fa-4ea9-b9fb-56f16e43f63f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:16.959603Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d56ce9e0c1f0c0877dcbd375315550760b53faf59517917c2d0a46d5a7e348ce","observation_id":"dcfea0ad-182c-4208-ae41-dca6b326ee85","resolution":{"observed_at":"2026-08-07T00:41:20.058420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.036548Z","title":"Top web development languages","venue":null,"work_id":"c309faf3-b234-47cc-8672-60ccc11d7f82","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.094990Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:919343e66d8fc5646d577c32173fc075bd687bb0f5cb179254c6f0604539f1b9","observation_id":"43e960de-537c-41b6-a1f3-fdd546ebc97e","resolution":{"observed_at":"2026-08-07T00:41:20.041151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.019707Z","title":"Best languages for web development","venue":null,"work_id":"2949a1e9-7c36-449f-ae3e-9cc9a09928b2","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.177631Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d0508415417b4240a72c6d2bfd5f6f31095a62eeaa575ff996ce2344c6e9aad6","observation_id":"fe91b5eb-f2a1-42ec-9213-efe7d0c40ea4","resolution":{"observed_at":"2026-08-07T00:41:20.025113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:20.005070Z","title":"Best languages for web development","venue":null,"work_id":"85aeef7a-08b8-41d4-9932-45c27ed9efe4","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.229547Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:ab56982a6a99a492f13ace317cfabc5d68c59dd83d9d340effe6e1b7552c0e79","observation_id":"47833b2c-748c-4e62-ac14-25736f0f99b1","resolution":{"observed_at":"2026-08-07T00:41:20.009304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.989566Z","title":"Best languages for web development","venue":null,"work_id":"92097d60-5aa4-4cb8-892a-5111384b223f","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.282845Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f0c8b31f0c323180d77e8e7fdddda06cdfad1e9ef643b36176fb890755bf3311","observation_id":"46861d48-4678-43f6-8729-2932bbfa6e84","resolution":{"observed_at":"2026-08-07T00:41:19.994200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.975402Z","title":"Empirical analysis of security vulnerabilities in python packages,","venue":null,"work_id":"5ff51a65-af10-49d4-aaee-6cc7512143da","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.322669Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a55deab375fc353590c2d0a348abc6006c63534a064641badf99baaf7a3a0951","observation_id":"ab98dd44-5c3a-4d9d-939d-441a5443116e","resolution":{"observed_at":"2026-08-07T00:41:19.979876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.960022Z","title":"Small world with high risks: A study of security threats in the npm ecosystem,","venue":null,"work_id":"efce4fd1-5c43-4c50-ad8f-dec96d6deaef","year":2019},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.365173Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:86acee1224f0e8d0f30c2d499f088213d7e685f0e82a6c07bad716e5181923d7","observation_id":"3c138664-fe12-4918-bf5b-2fcb1929325f","resolution":{"observed_at":"2026-08-07T00:41:19.964782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01139","last_updated":"2020-12-02T17:40:57Z","snapshot_observed_at":"2026-08-07T01:11:56.422263Z","submitted_at":"2020-02-04T06:10:18Z","title":"Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01139","snapshot_observed_at":"2026-08-07T00:41:17.469971Z","title":"Towards measuring supply chain attacks on package managers for interpreted languages,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.469971Z"},"links":{"cited_paper":"/paper/2002.01139","citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8d353e8832d896b9766697b3362ae659cfc75ba3b43853e1a352ddfce09916bb","observation_id":"6240d4cf-84af-4617-94e7-d08fbd221131","resolution":{"observed_at":"2026-08-07T00:41:17.469971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.943637Z","title":"Do software security practices yield fewer vul- nerabilities?,","venue":null,"work_id":"4c975f79-803a-4ef8-8bf5-b1325c33d27a","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.591706Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:9868a08faa4d3cd156106e28059f181120af46665bf3501aadb759981629b890","observation_id":"88f464a8-a85b-490d-9ae6-4fd1d136787f","resolution":{"observed_at":"2026-08-07T00:41:19.950057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.928525Z","title":"An empirical comparison of dependency issues in oss packaging ecosystems,","venue":null,"work_id":"9ca44f30-b6fe-4be4-bec0-f7f9130b0259","year":2017},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.650349Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:35fcdca1d458b463dba31f15ef7b44d7de298b738862233353c9f53b8c06be08","observation_id":"4aa3aa75-94ea-4586-a50d-a95ad31e1379","resolution":{"observed_at":"2026-08-07T00:41:19.933844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.914658Z","title":"An empirical comparison of dependency network evolution in seven software packaging ecosystems,","venue":null,"work_id":"902f24e5-4bd6-4430-89b6-f029d8a9c4f4","year":2019},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.725197Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:5948c53ad62c8497a30b62350366ea29943d3bc04b2793b6d85a6adf723e31c5","observation_id":"effc3bd8-b6cc-43a0-835e-8f81cd3a3fb4","resolution":{"observed_at":"2026-08-07T00:41:19.919148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.899954Z","title":"Structure and evolution of package dependency networks,","venue":null,"work_id":"e52f7890-5a1b-4160-b638-55f352762d38","year":2017},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.844856Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:b0c05888fabdd78f8b5ded9f6a01c4bb60e573fbfb58f685338f7c384b55dacd","observation_id":"ac7a2834-9612-4f8c-8d04-bdc76155363d","resolution":{"observed_at":"2026-08-07T00:41:19.904636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.884440Z","title":"On the impact of se- curity vulnerabilities in the npm package dependency network,","venue":null,"work_id":"38d4887b-2323-4523-8295-9df208b77713","year":2018},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.872690Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d00500475f87b197eccfb2b2e013288c046e1dd6aeac9acf89ba60ebc7a632da","observation_id":"d78b4291-1340-4d26-b57c-fb578ea630e3","resolution":{"observed_at":"2026-08-07T00:41:19.889080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.869895Z","title":"On the impact of security vulnerabilities in the npm and rubygems dependency networks,","venue":null,"work_id":"785cac3b-71de-47e7-84b7-d3f5e4c81485","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.877137Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:9a59d1632fbf7ff83e9f1463c7d7086e3e5cd60ee6eb86768be9b10448780c51","observation_id":"f2c65bf3-3524-4af7-b76f-fa825ddb501c","resolution":{"observed_at":"2026-08-07T00:41:19.874507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.854679Z","title":"Vulnerable open source dependen- cies: Counting those that matter,","venue":null,"work_id":"4536bd88-3607-4de9-92e7-7f6502964b3f","year":2018},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.893228Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:ed536b7e39cd9635c9945343893435b7ac3f4bdb09fd1ef4f36764d7fa7b674a","observation_id":"8980cd96-0fb6-4e47-b513-50ea5d6bbff8","resolution":{"observed_at":"2026-08-07T00:41:19.859695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.839429Z","title":"Common vulnerabilities and exposures (cve)","venue":null,"work_id":"1692d7cb-0f4a-486b-abe9-2e981ed090ee","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:17.973348Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:64cc123f3ab8b528e0e981487e69f56cdc8da997ba7bce6a574b4f5a2b9344ce","observation_id":"3527b220-e0da-4787-bec3-7926dd5f7d3f","resolution":{"observed_at":"2026-08-07T00:41:19.843838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.825790Z","title":"Mitre corporation","venue":null,"work_id":"019ac64f-07be-4d09-8f19-d1e4cfde1b54","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.033048Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:3953fb8e027f765dd36b7523483b1afe5b6cf0beb9c4a7fcccbb7e751ecbc6fb","observation_id":"2e20f57f-5f2c-44b7-a9ba-5856b7c70060","resolution":{"observed_at":"2026-08-07T00:41:19.830194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.808990Z","title":"Common weakness enumeration (cwe)","venue":null,"work_id":"fc17c846-5627-45bc-97e0-4ce8726ed69c","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.097151Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:291c93cd80211cef95b0b23401cd898a160fb5ca60b9ed2e37093cd2fd3763bf","observation_id":"b320f51f-c304-42a8-8b7c-c5df9b80722a","resolution":{"observed_at":"2026-08-07T00:41:19.814428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.793964Z","title":"National vulnerability database (nvd)","venue":null,"work_id":"899ae9e6-1d8a-4b9d-8bcc-a2b92ec821c3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.228485Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d73ec83355d1aa180221b2f4ddba9334a24ab32db43d5daee30e6ad3dbd7021e","observation_id":"1b014856-3bcf-442e-97f5-7e3e92b09764","resolution":{"observed_at":"2026-08-07T00:41:19.799050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.779055Z","title":"What are weak links in the npm supply chain?,","venue":null,"work_id":"66c89a33-d6be-46bb-b8f8-8a27337dc1ed","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.335827Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:8b7078d0eb2a5f21256d4f03c862967093593d7f61d15d0be8fa37bf83b72287","observation_id":"bffd80ae-84a7-41c1-94e5-966103df42b6","resolution":{"observed_at":"2026-08-07T00:41:19.784096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.764155Z","title":"github/advisory-database,","venue":null,"work_id":"4abe19a5-0aad-4718-baef-f777971073db","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.410880Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:5e85f9cdd552728e594ac0b499fa662edcfa0bc1ae9798c59bad1e14664a19f8","observation_id":"2ae82ce8-f748-48ad-ab89-f397bce5bce6","resolution":{"observed_at":"2026-08-07T00:41:19.769238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.749116Z","title":"Snyk vulnerability database","venue":null,"work_id":"9ec3ae4e-8b60-449b-acca-5e18f54d8fcd","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.472896Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:9115072eb640271fe6fcb3a1a228b5ffe317a4103011e4b9d66264d3919b37e8","observation_id":"d1dc5f18-f1c9-4dc3-a4b0-f900b9cf6b12","resolution":{"observed_at":"2026-08-07T00:41:19.754364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.731539Z","title":"Libraries.io - discover open source libraries","venue":null,"work_id":"7d4380da-285e-4b1d-9928-ae3692c69ee6","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.507508Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:89c91e74e185e64a9b79a3028326da508cbacc0ede9d61ba96522f5ad3ef1da5","observation_id":"5bc59b39-5fef-40ef-8e01-698213cccd15","resolution":{"observed_at":"2026-08-07T00:41:19.736896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.716522Z","title":"Build software better, together","venue":null,"work_id":"392d01d9-7716-49d6-9e79-11acfe1a3902","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.522755Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d5063962ef33dff8eb9e57aee25ce6a367a85ed654f5b577be4cae114c29a7e4","observation_id":"eb1f0467-7037-45ab-92e5-8ac7236d049f","resolution":{"observed_at":"2026-08-07T00:41:19.720966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.701138Z","title":"Open Source Vulnerability format - Open Source Vulnerability schema,","venue":null,"work_id":"da04b259-eab8-4aaf-bd7c-75940487c982","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.527494Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:6ab87c86d9f95137e35b3e0906948d2ea4574d78700da13d3a688d546d55a433","observation_id":"4ae11505-3725-4faa-abf4-65357f71e16f","resolution":{"observed_at":"2026-08-07T00:41:19.706420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.686463Z","title":"On measuring vulner- able javascript functions in the wild,","venue":null,"work_id":"7faa32a8-28bd-48ec-91e7-a705ef6958d7","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.531505Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:4fd893391b168e027f6889a6e47d89a127ccc2e043ca994416431e52adb5a831","observation_id":"22d4a959-6e5b-4c6c-b52e-ea9b513bfdf2","resolution":{"observed_at":"2026-08-07T00:41:19.690884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.670306Z","title":"To de- tect and mitigate the risk in continuous integration and continues deployments (ci/cd) pipelines in supply chain using snyk tool,","venue":null,"work_id":"a43075a1-f8b5-4d28-abe3-6d38518deed4","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.535604Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:bd9e69f1399bc32dc1ea44b02816b3da8727e1172c7fb23353dd390d16523671","observation_id":"7f3cd61e-829a-4387-8198-12e83aaa323f","resolution":{"observed_at":"2026-08-07T00:41:19.675934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.652425Z","title":"Why johnny can’t use secure docker images: Investigating the usability challenges in using docker image vulnerability scanners through heuristic evalua- tion,","venue":null,"work_id":"4a9727a2-bf0d-4794-9770-eff00a96d669","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.539935Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a4f3d163960b036c1edd7f6bd382155256a5aaf0958053a230d66a1b80ff11c5","observation_id":"bd22e318-170c-424c-afe0-9e77cde90a0b","resolution":{"observed_at":"2026-08-07T00:41:19.658690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10345","last_updated":"2023-08-20T19:33:12Z","snapshot_observed_at":"2026-07-06T16:08:17.076884Z","submitted_at":"2023-08-20T19:33:12Z","title":"Can Large Language Models Find And Fix Vulnerable Software?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10345","snapshot_observed_at":"2026-08-07T00:41:18.544516Z","title":"Can large language models find and fix vulnerable software?,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.544516Z"},"links":{"cited_paper":"/paper/2308.10345","citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:de71bc9a1a73718b5196c6b717fe332b0fef9e2c159045e51b083715c57f39b0","observation_id":"2ac46f0c-9e02-4125-8e77-be517112cdfb","resolution":{"observed_at":"2026-08-07T00:41:18.544516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.635364Z","title":"Wayback machine,","venue":null,"work_id":"9dba0e53-4c74-4319-bbaf-1ca7cb0fc118","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.549508Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0059a550fd2e1fc481d5a61edf4beb8637327abd22019de76599cd1145f1c9f3","observation_id":"818cc7be-1636-47c1-b833-763a2f2c67fd","resolution":{"observed_at":"2026-08-07T00:41:19.640685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.618328Z","title":"Log4shell: The vulnerability explained,","venue":null,"work_id":"c70393ea-0d5c-477e-865f-b13286df2087","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.554762Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a2270823776681089803899916d19c1769e82a25c528676c6abb6366c5f5d18e","observation_id":"9bbf87f5-0e75-48c3-b2d6-79275ef24df3","resolution":{"observed_at":"2026-08-07T00:41:19.623664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.599668Z","title":"US govt offers $10 mil- lion bounty for info on Clop ransomware","venue":null,"work_id":"a2da901e-3c78-4bc2-aaf4-8367e3944d69","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.560330Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:9e4640d5f41affe8f14333e128aad9e7da90c5c727b40dadd95fbc523f48b78b","observation_id":"4f958e5b-28d2-448d-8cda-d275e8f68bcf","resolution":{"observed_at":"2026-08-07T00:41:19.605382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.582186Z","title":"Active exploitation of the MOVEit Transfer vulnerability by Clop ransomware group","venue":null,"work_id":"432fe6c3-fa72-4512-a0af-737e8bba25da","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.565889Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:83c10a44637f5161f0d561bce8a273b05a108c7d2d06e93dbef4e2e49a512870","observation_id":"4d373fca-9e60-4013-bfa3-4d3b894b665e","resolution":{"observed_at":"2026-08-07T00:41:19.587946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.563023Z","title":"The SolarWinds Cyber-Attack: What You Need to Know","venue":null,"work_id":"1ef3036a-ef5f-4265-86bc-fe2a07175207","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.571537Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:33e966c6d350cd20090f2fe4932cdba9894d7a2c4ed681414611137218f27d82","observation_id":"a5e49f92-9df2-4a23-9e56-06d94861ae7c","resolution":{"observed_at":"2026-08-07T00:41:19.569293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.547444Z","title":"Go modules reference","venue":null,"work_id":"1454132d-738c-4838-8ea1-01133d0907e2","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.577357Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:abfaa04bbb39f6b8683f0ecb37feae6ca00697be0b4cbfb08fcf4c5e43c530c1","observation_id":"3bb42e3c-23da-4bde-85af-be3f59a99dab","resolution":{"observed_at":"2026-08-07T00:41:19.551478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.531215Z","title":"Go proxy","venue":null,"work_id":"4eee94e3-db6b-4de2-a229-fcc28e2fe02f","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.582923Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:0a058facaa909096093b1bc07004908882b2874eb3f58ddc1c81b53e79acf220","observation_id":"7bfbb399-eaf0-4c14-bb08-12734ab2f5db","resolution":{"observed_at":"2026-08-07T00:41:19.535752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.515024Z","title":"Using theGO111MODULEeverywhere!","venue":null,"work_id":"0bd266ac-231b-421e-bb34-b4c8bc3c1b70","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.588752Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:9fa4a608bdb9e2436a3aa956dbe8f97435d75891570e1379eb9ca0989d49d894","observation_id":"7db59566-1e16-4fcf-a710-e4ce2e86333a","resolution":{"observed_at":"2026-08-07T00:41:19.520383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.498767Z","title":"I know what you imported last summer: A study of security threats in thepython ecosystem,","venue":null,"work_id":"cfc5f63d-581f-47c7-8239-6c83247cf3e1","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.594853Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:b3c40b28e37c8f5956919e5c5266a248b7d7da017fce9f51c2b1ce7112e30ca2","observation_id":"cbd118c2-f823-4dac-ac74-e26e55b8fdc8","resolution":{"observed_at":"2026-08-07T00:41:19.503677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.480627Z","title":"An empirical study of malicious code in pypi ecosystem,","venue":null,"work_id":"5ff9462d-f56b-438b-8e83-e18175c96e64","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.600474Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f5f32ab705c7b7559f0914f151b2bcb83d5970afa2362576580afeac4cca2419","observation_id":"cc9e079c-5451-42cc-bd30-93b5843442df","resolution":{"observed_at":"2026-08-07T00:41:19.486592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.464954Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks,","venue":null,"work_id":"ee1c9842-fef7-4472-947a-7e0dcb097048","year":2020},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.605869Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:914d988ffdfb306bed5be10ff6b414dbfbeb113eea56d7ad77373ca419a65b99","observation_id":"cf8d7c1b-6b99-4586-a391-111db2112e78","resolution":{"observed_at":"2026-08-07T00:41:19.469936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.449363Z","title":"Dependency confusion: How i hacked into apple, microsoft and dozens of other companies","venue":null,"work_id":"80557875-c8f4-4bea-b53c-710770da251e","year":2021},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.611636Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c732ecb7de2b3ea0d996724a2dc17a165dac1e87e89f94e8db2e7bdf74bd2936","observation_id":"fd3be95a-8ca8-4e0a-a258-636afb299d37","resolution":{"observed_at":"2026-08-07T00:41:19.454775Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.433120Z","title":"npm dependency confusion attack targeting gxm refer- ence","venue":null,"work_id":"730b76a2-6160-4b40-aaec-b0ee95cb3764","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.617257Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:bd9061ff65cdbdc483baff610eb8a43254ff0e27714d575391caeed600c66a7c","observation_id":"a8050465-59ea-486a-8f8f-c490a36bf1db","resolution":{"observed_at":"2026-08-07T00:41:19.438315Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.418013Z","title":"SNYK-JS-IBMPTCGREETME-8518693: Malicious Package in @ibm-ptc/greet-me","venue":null,"work_id":"beb45ce9-1bbb-4a07-848f-bc515eb88c82","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.621862Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e04cd6d8904ec8ceb44977cc9738af2603be45ace336c44d76c8216e1baa1e01","observation_id":"08c35435-1063-460f-9930-4e19a7621d63","resolution":{"observed_at":"2026-08-07T00:41:19.422985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.401587Z","title":"SNYK-JS-SWIGGYPRIV ATEANALYTICS- 8553970: Malicious Package in @swiggy- private/analytics","venue":null,"work_id":"b9a017f5-c128-4f4c-9ee9-666d1294a8a3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.627419Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d0b9ad7d0da70a344e89dec348aa167d45feb058a538eba0cfe8d2aca20c311b","observation_id":"b918144e-93c5-4af9-a617-2d1d9c50dc2a","resolution":{"observed_at":"2026-08-07T00:41:19.407686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.382440Z","title":"SNYK-JS-POSTINSTALLDUMMY-2847431: Mali- cious Package in postinstall-dummy","venue":null,"work_id":"d1b0d234-f24c-4965-b3fe-6fc62bdc151e","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.632208Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1ecb0183d5907149918032e659a44f363c7b9e9025decb74c6fc3df55fb34951","observation_id":"6655a007-0d2c-4e18-8ab0-252f3f233988","resolution":{"observed_at":"2026-08-07T00:41:19.388479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.365807Z","title":"SNYK-JS-NODEIPC-2426370: Malicious Package in node-ipc","venue":null,"work_id":"29322aa3-d893-43e5-acd8-6e01ed3c7572","year":2022},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.637451Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:ec3ddd51c25fd5e7d63e03dc7cc3f4d0de03979ea53cfdab7b88ab1f596eb502","observation_id":"d609e2c2-40e1-472a-984e-692dabcdf8bc","resolution":{"observed_at":"2026-08-07T00:41:19.370302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.348366Z","title":"The family of safe golang libraries is growing,","venue":null,"work_id":"bcc7f4a3-657c-4887-b5b4-d38b472bcb56","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.641658Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:1ba80d5f4becb0575d73bfd3f35f38bfdc5eea4e9f875722876c6c44f14d7f34","observation_id":"460f554d-12f2-4b30-a58f-967521453e9d","resolution":{"observed_at":"2026-08-07T00:41:19.353618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.316428Z","title":"Introducing npm package provenance,","venue":null,"work_id":"3c651b00-1a27-4aa8-b274-ba27bcd99365","year":2023},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.652926Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d8380444cf3d73b0fa95ddb9da890325acee7ded202d5c734e5f8bc33c01848d","observation_id":"6c340277-630c-483e-8fd4-c0a1ae15ad9f","resolution":{"observed_at":"2026-08-07T00:41:19.321296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.301363Z","title":"rc - npm package,","venue":null,"work_id":"70802dda-f3b6-4418-b463-c8582dc6cbe0","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.658069Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:771b8f00ef5682e3193fe7cb8992017bdbdc306ae6066934e0a84d95883120d2","observation_id":"f43ba960-d51d-4c9c-9c2f-2d46da608ec6","resolution":{"observed_at":"2026-08-07T00:41:19.307145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.285245Z","title":"coa - npm package,","venue":null,"work_id":"caeb3fee-3c41-4335-89c9-c883a6971b1d","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.663477Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:037f171774a276672386174ae34dba21787c1eb873d0aa4a89bb52fb69353a1e","observation_id":"83df5e8f-6cd0-4bf1-91cb-2f31480d49f0","resolution":{"observed_at":"2026-08-07T00:41:19.290423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.269159Z","title":"ua-parser-js - npm package,","venue":null,"work_id":"2e9bb74f-b61b-4ae1-81bd-dd93762a3f4c","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.668631Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:08e7f92259da12d55b4b72ce03ffa195872d614056bffaa5a459b803d77adf80","observation_id":"04a2446c-9b37-4314-8260-0a166bce569f","resolution":{"observed_at":"2026-08-07T00:41:19.275173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.253647Z","title":"CWE - CWE-79: Improper Neutralization of Input During Web Page Generation (’Cross Site Scripting’),","venue":null,"work_id":"7cf86e31-6acc-4130-89a3-9efaa849e1a4","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.673125Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:93d3a265f5fc447fa10eab08735a42bb1f6522e5f1d53400e4765285aca44e00","observation_id":"0d2f2250-1a1d-4c54-8964-4adfd96396c5","resolution":{"observed_at":"2026-08-07T00:41:19.258890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.236484Z","title":"CWE - CWE-22: Improper limitation of a pathname to a restricted directory (’path traversal’),","venue":null,"work_id":"26f7498c-5c19-4b7b-a050-9bf2079778a3","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.679392Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:26233d451dd5a310d46a62c189f5b86aa9cfe619d03632fcc1752934f72b6f11","observation_id":"51c12b66-1093-46cf-9fb6-dcc75e9cb172","resolution":{"observed_at":"2026-08-07T00:41:19.242392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.219290Z","title":"CWE - CWE-94: Improper control of generation of code (’code injection’),","venue":null,"work_id":"6c54e7b9-ccd3-4a8d-9f48-91bf6c47973a","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.684025Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:7150034b34250562efd4db9d90e8408e25f440998ae7efb01105af62934de445","observation_id":"0b319214-79d8-4500-99f1-a6886b9b9115","resolution":{"observed_at":"2026-08-07T00:41:19.224971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.201404Z","title":"CWE - CWE-1321: Improper Handling of Prototype Pollu- tion,","venue":null,"work_id":"40a2cd43-efcc-4a2c-bdb6-1b09a40c7a9a","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.688598Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:a3c15af97dcfe8e6a7e5fd592035e2595e83b0813f12f607691c562f3b3a3f0d","observation_id":"98f0c9b2-0988-486b-9f6e-46089db11c87","resolution":{"observed_at":"2026-08-07T00:41:19.207256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.180524Z","title":"CWE - CWE-122: Heap-based Buffer Overflow,","venue":null,"work_id":"d3979076-0211-40ed-af87-e64c4c686e29","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.693550Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c088a5201ccdab9c52664ed0c859ab95d91f6d3fb36f2e2a1e816747be48ce3d","observation_id":"dfcc63f4-7ac3-4653-92e5-0c25dc8599ba","resolution":{"observed_at":"2026-08-07T00:41:19.187726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.162582Z","title":"CWE - CWE-416: Use After Free,","venue":null,"work_id":"939ee74e-7c96-428e-84a0-a30206c0e504","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.698744Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:47333d2785e7291049864907a1e4d86119ef4503f8f532f4af4e7d73c35d0020","observation_id":"06281f84-9a0f-42fd-b97f-4b17d5cb156c","resolution":{"observed_at":"2026-08-07T00:41:19.168465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.144459Z","title":"CWE - CWE-787: Out-of-Bounds Write,","venue":null,"work_id":"862c1965-37ce-47be-b863-e7e62630b9a7","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.704072Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:10f7a7a01e056a9598a0e085b7412cb4eb8d0ea48320b27f6e5565f760426670","observation_id":"10f4620b-10d3-4565-a5a8-2b963af0bf8e","resolution":{"observed_at":"2026-08-07T00:41:19.150007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.125811Z","title":"Range operator","venue":null,"work_id":"68174541-b054-4405-836d-3f02d8dbd1a1","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.709547Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:c596f4058757aaa4c7dba5179bf5a40d92b07d56d096502bbab752f12adbd221","observation_id":"716190b2-6695-442c-95e7-6479213f2e7c","resolution":{"observed_at":"2026-08-07T00:41:19.131632Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.107018Z","title":"CWE - CWE-362: Concurrent Execution using Shared Re- source with Improper Synchronization (’Race Condition’),","venue":null,"work_id":"f0267dfe-9fa4-44b2-889a-6a89c75d9a66","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.715609Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:50c7f224dd3adbfbd2e5af4656b8302789eb8746740ac17c4e46863e26c6692a","observation_id":"cb387af2-a3bf-40be-9b7e-3e21bdc120b6","resolution":{"observed_at":"2026-08-07T00:41:19.112327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.064975Z","title":"Below, we provide the formulas and definitions for each term used in our study to ensure clarity and precision","venue":null,"work_id":"2f36805a-972e-4533-8474-0566c918c17b","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.725559Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:02e020d6773fbdb4537ba2460790b4874411d9d9b6d984de34dd23e6e49306f2","observation_id":"d8061490-4e54-4446-8a82-9c5360954fe8","resolution":{"observed_at":"2026-08-07T00:41:19.069894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.044653Z","title":"These CWEs have either become more prominent or less frequent due to improvements in ecosystem security practices","venue":null,"work_id":"cf541dbd-3555-4861-a376-d5343313e269","year":2000},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.730660Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:f63c6dda3f0341905ad752ee4fe7481aea8ca34b1b0c6cb112060ec17d3d5fc7","observation_id":"22160637-cf91-47b3-bada-4134ff7bac9d","resolution":{"observed_at":"2026-08-07T00:41:19.051532Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.022966Z","title":null,"venue":null,"work_id":"45033ceb-32e8-4ec8-a134-2083af4db85f","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.736392Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:063d8654a0f4c7eda6bdd58b8a4ea0bcffa57058ba5678da979ca0108a10a10d","observation_id":"78f0fbbc-bbdf-4e74-ad8a-ef5daf63de99","resolution":{"observed_at":"2026-08-07T00:41:19.030216Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:18.928193Z","title":"14 TABLE 4","venue":null,"work_id":"4308e844-8c16-48dc-87e1-0d0b7b7058fd","year":null},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.741692Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:e1db58797a5351ab5ae442a2a1762f97e79622527d6f7d00f72fcef3acc82958","observation_id":"16fe951f-63ff-4596-aacd-d74996544db0","resolution":{"observed_at":"2026-08-07T00:41:18.934575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.332020Z","title":null,"venue":null,"work_id":"d54149c7-d256-44e0-9b06-068ecffae361","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.647618Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:d2355e472ab9350f72fa32b69a5196723ad6eb1a4093ec4eb6c5c5b6da444567","observation_id":"0c704d7b-8c49-4ca6-b4d7-457b83206b5b","resolution":{"observed_at":"2026-08-07T00:41:19.337461Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:41:19.081421Z","title":"Appendix","venue":null,"work_id":"10efb686-f29a-4fbf-9ed8-b48f70fc50e9","year":2024},"citing_paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T00:41:18.720769Z"},"links":{"citing_paper":"/paper/2506.12995"},"observation_digest":"sha256:bd548e28bff4d94ca137c077b39ecd197a2a2ae351e0c279801134ca1ec16ba9","observation_id":"4e69e5be-a829-457a-9041-796efe152917","resolution":{"observed_at":"2026-08-07T00:41:19.086835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.12995","last_updated":"2025-06-15T23:22:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T00:35:03.736227Z","submitted_at":"2025-06-15T23:22:25Z","title":"Open Source, Open Threats? Investigating Security Challenges in Open-Source Software"},"reference_resolution":{"displayed":80,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":4,"verified_exact":0,"verified_fuzzy":75},"total_outbound_references":80},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 80 of 80 outbound references and 1 inbound Pith citation observation for arXiv:2506.12995."}