{"as_of":"2026-08-07T15:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d06755b4e44a321bfe2f649a7a4079b5b90112798237a0b0f72c40b631c1116c","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T14:22:35.288542Z","state":"measured"},{"denominator":75,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":75,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.21417/citation-record","integrity":"/paper/2508.21417/integrity","json":"/paper/2508.21417/citation-record.json","paper":"/paper/2508.21417"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.878027Z","title":"Common Weakness Enumeration (CWE)","venue":null,"work_id":"8c2f9e17-2c33-4763-a7fa-f30effcf9a24","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:33.921400Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:e6fa183ef62ffd107e6f2f2b598926bd01cd7e7bef5f05ece1e5d4b62c47cc48","observation_id":"f4875a52-7b45-4eea-87dd-f204d67af8cb","resolution":{"observed_at":"2026-08-05T14:22:38.931504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.726678Z","title":"Python Package Index (PyPI)","venue":null,"work_id":"1309ce0e-4c97-48b7-b1b4-5a85da6552d1","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.104565Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4706b8d147f07d1b9856f523d0afdbf35935131632aa3d9ea8f534667ad23482","observation_id":"9125aef2-be30-4c53-bb50-4fc1a5e21512","resolution":{"observed_at":"2026-08-05T14:22:38.811542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T14:22:34.246519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.246519Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3f7bd549ac3b30c71de871ec73210f4575c62cff37504a9a995f517e849201b2","observation_id":"83bd2bca-4766-4aae-85e5-11ae3daa920d","resolution":{"observed_at":"2026-08-05T14:22:34.246519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.355513Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.355513Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:821c3940a03e07cf2074a9a457520849973d25e2e630c1069ca1b292a8c673f8","observation_id":"79fcf3c8-140e-4d56-9d33-b55a560c7a72","resolution":{"observed_at":"2026-08-05T14:22:34.355513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-05T14:22:34.387171Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.387171Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3c0484da678ab40dd75e6c459adf5602b0f120f6d4b3283126c9c54a2a7aba76","observation_id":"38ed1bcf-dde3-43fd-9064-3064bae508a0","resolution":{"observed_at":"2026-08-05T14:22:34.387171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.587572Z","title":null,"venue":null,"work_id":"937879eb-8bf4-4a2a-b285-734c89f84906","year":2000},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.544233Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:07c00878a083e6beb9c6ec8d23cd2198d8a6e881c5d58aa7f38eee0e625d824d","observation_id":"da8c5f00-17ec-4932-846b-6d160d470d8c","resolution":{"observed_at":"2026-08-05T14:22:38.635956Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-05T14:22:34.641602Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.641602Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:88883639b460463b2a6e6e363570bf01a38c463639be0a8ef64bcf9c64d38ad7","observation_id":"6254b694-c558-46b0-ade5-8a3430a0d843","resolution":{"observed_at":"2026-08-05T14:22:34.641602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.432260Z","title":null,"venue":null,"work_id":"067bc55d-0949-4085-a533-41230181836c","year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.756619Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:427cce9ab5926276cc0b1daf1e1dd70c62cf3cbe849976814e46e5bcfe504d9a","observation_id":"dea88370-8b0d-40ea-ae02-acb36a3382ae","resolution":{"observed_at":"2026-08-05T14:22:38.485294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.782910Z","title":"Carver, Munawar Hafiz, Patrick Hilley, and Derek Janni","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.782910Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3456b968ec62f1c26fa39595beb93719a3e87ec02fe75c1dca1a66d6956cd99d","observation_id":"9b04f445-af03-49f3-91d4-a9fa92a12b4d","resolution":{"observed_at":"2026-08-05T14:22:34.782910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-05T14:22:34.791444Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.791444Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8d78f45fbbb16a6aad7894f29938961bebb64e69ef475478ce493bbb2ef0c3c5","observation_id":"2d9db67f-dd62-4c90-bfec-d35cd1b73a45","resolution":{"observed_at":"2026-08-05T14:22:34.791444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12712","last_updated":"2023-04-13T20:41:31Z","snapshot_observed_at":"2026-08-03T04:49:15.195814Z","submitted_at":"2023-03-22T16:51:28Z","title":"Sparks of Artificial General Intelligence: Early experiments with GPT-4","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12712","snapshot_observed_at":"2026-08-05T14:22:34.799840Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.799840Z"},"links":{"cited_paper":"/paper/2303.12712","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d1dc30e4f7c63cf6c3ccfa13f5af6271465d98efdd5f66a0849030c4918741d2","observation_id":"4c913649-4c6b-474c-aa6e-cff55dea4f67","resolution":{"observed_at":"2026-08-05T14:22:34.799840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.200498Z","title":null,"venue":null,"work_id":"2e1c255c-8726-47c8-922f-ec37e809567b","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.807051Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2032886a9865871d4c664cb6bb846a333a979aac70a94b4072a97fca16c61911","observation_id":"5ac09593-047f-4d14-afe5-5137acb71bbb","resolution":{"observed_at":"2026-08-05T14:22:38.249305Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.156935Z","title":null,"venue":null,"work_id":"7d18e28e-5805-4e6d-8978-9137963c464b","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.813452Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:acfc4b03076c25da2dd29baf0bfcdfbee1102ed7998ba3c60b3e567f54adc4a0","observation_id":"4ae173aa-6c69-4bcd-8c38-afd9d2632836","resolution":{"observed_at":"2026-08-05T14:22:38.175035Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.104771Z","title":null,"venue":null,"work_id":"f7654803-3bd2-4e66-ae3b-6472cbfa1ac9","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.818634Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f455241d031efa1934fec86bd51d76fd65cbf90035be77b773d3de58ce6a9843","observation_id":"5754117d-9d1d-40c4-9fad-0d8f5df6f816","resolution":{"observed_at":"2026-08-05T14:22:38.123961Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15631","last_updated":"2025-05-18T06:57:37Z","snapshot_observed_at":"2026-07-06T19:36:49.949466Z","submitted_at":"2024-10-21T04:27:41Z","title":"Security of Language Models for Code: A Systematic Literature Review","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15631","snapshot_observed_at":"2026-08-05T14:22:34.827152Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.827152Z"},"links":{"cited_paper":"/paper/2410.15631","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f099815fa58fcad79f9ff5c047cafad75f0dbcbc3293a6272891f408f6da2135","observation_id":"7aea44a9-1937-4438-8807-f220e0273175","resolution":{"observed_at":"2026-08-05T14:22:34.827152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.837126Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.837126Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:356fa57cec8e23e2cf38711e1c9d4693ccc99802468e83aab21dfb3dc77cc1e8","observation_id":"7838b89d-b274-4f77-914e-d42c144203e1","resolution":{"observed_at":"2026-08-05T14:22:34.837126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10664-021-09951-x","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.372514Z","title":null,"venue":null,"work_id":"6024e282-eef6-4933-8da1-c64ebc1ec8bd","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.843446Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:f8708a9ef1e9e4c786e642c1c75edb23d586886f983e6bda150f93689fc66fdc","observation_id":"8868af7f-a4b0-41a6-9461-d7444f8cdd53","resolution":{"observed_at":"2026-08-05T14:22:35.382603Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.849994Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.849994Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2f0eb68a7c5f9a0a0a111026935e22f7e9525d9337e08f88a411c4c1599c2bb4","observation_id":"f0b02522-6f00-466a-8c96-0fd17376fc48","resolution":{"observed_at":"2026-08-05T14:22:34.849994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.017646Z","title":null,"venue":null,"work_id":"b4ba0aa7-cfda-4961-a54a-fc58ceeb562b","year":1993},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.856822Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:a22cd3f9b70744020bd64e145ed6930aa0b73ded37c7d3440f31ca6819fe21d5","observation_id":"a7560cc3-a502-45d4-81b8-682779c32f6d","resolution":{"observed_at":"2026-08-05T14:22:38.038535Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.956477Z","title":null,"venue":null,"work_id":"87bc866c-a9f5-404d-9533-3f04412c8e9f","year":2011},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.865835Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6522a7041ed502f1c28ecea3c8a0ffe53a59af3f24c36c6d9abdb319529b1adf","observation_id":"ad96a7dc-72ce-4246-9f27-84db5deaf578","resolution":{"observed_at":"2026-08-05T14:22:37.980588Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.907563Z","title":null,"venue":null,"work_id":"897783e5-cc8d-4c30-bcb4-bed4ad0e8d08","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.872632Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6b41782e3d3ea89a651dc1b18c79b5a03131cb8d1678af7948dfdb2d6d0221a8","observation_id":"451ce81d-71b0-434b-af9d-23e70ab15550","resolution":{"observed_at":"2026-08-05T14:22:37.925462Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.29183","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:36.649336Z","title":null,"venue":null,"work_id":"f6fbe7dd-e7cb-44d5-9805-e3363ac8b0bf","year":2021},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.878564Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3615e9de7fb88d801e19407245f357f623505d8eb119ffa681280fea9a185a67","observation_id":"3cf75503-abb8-470a-9fb3-45271ad459e0","resolution":{"observed_at":"2026-08-05T14:22:36.661361Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.885727Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.885727Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6cc34fcbe2f5226126edf7f7b4f27c318e8f550db085c638b065eca710fafdd3","observation_id":"452d2ebc-7815-4ac5-89f0-69d128aaa897","resolution":{"observed_at":"2026-08-05T14:22:34.885727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.892446Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.892446Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8925cc53cd89af10bc5e261635a9923d96416c044fcc0690edf91ac03d85115d","observation_id":"471111ac-eb34-49e5-9c80-c13c188b941f","resolution":{"observed_at":"2026-08-05T14:22:34.892446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08005","last_updated":"2023-05-13T21:01:14Z","snapshot_observed_at":"2026-07-06T15:26:50.277211Z","submitted_at":"2023-05-13T21:01:14Z","title":"Beyond the Safeguards: Exploring the Security Risks of ChatGPT","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08005","snapshot_observed_at":"2026-08-05T14:22:34.898784Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.898784Z"},"links":{"cited_paper":"/paper/2305.08005","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:98044b56a6a2392e1d54c80cbe85ea9e5222c18487100b5a03033c6d23101363","observation_id":"9e16eb67-4169-44e0-a2db-f80781ae060e","resolution":{"observed_at":"2026-08-05T14:22:34.898784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11415","last_updated":"2024-09-23T09:23:02Z","snapshot_observed_at":"2026-07-06T16:49:41.895773Z","submitted_at":"2023-11-19T20:22:05Z","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","version":2},"cited_work":{"arxiv_id":"2311.11415","doi":null,"metadata_source":"pith","pith_arxiv_id":"2311.11415","snapshot_observed_at":"2026-08-05T14:22:36.372977Z","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","venue":"cs.CR","work_id":"2d579bf4-58de-4c76-bff3-7dd8c4051244","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.907248Z"},"links":{"cited_paper":"/paper/2311.11415","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d3cfcb73cee7c4b3647b7e034490be88a25dc5e39ce4cd2abc303bc7f4e3481f","observation_id":"0c25cb81-0494-411f-844a-0b8c62591ade","resolution":{"observed_at":"2026-08-05T14:22:36.398294Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09283","last_updated":"2024-03-27T13:55:14Z","snapshot_observed_at":"2026-07-06T17:30:08.206972Z","submitted_at":"2024-02-14T16:14:03Z","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09283","snapshot_observed_at":"2026-08-05T14:22:34.913851Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.913851Z"},"links":{"cited_paper":"/paper/2402.09283","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:b20cabbdf4b811dd39b25f90f0b9e4f3d39d5c939602cb54f531bab4004f5f7d","observation_id":"ddf34a5f-a9c9-4178-a38c-74dfd1bdc6f8","resolution":{"observed_at":"2026-08-05T14:22:34.913851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01139","last_updated":"2020-12-02T17:40:57Z","snapshot_observed_at":"2026-08-07T01:11:56.422263Z","submitted_at":"2020-02-04T06:10:18Z","title":"Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01139","snapshot_observed_at":"2026-08-05T14:22:34.921518Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.921518Z"},"links":{"cited_paper":"/paper/2002.01139","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:eb8f465bc030989503694b48ba05c3943845f9e75bb0fa981a55f82d92c28ca0","observation_id":"9e7600a9-f38f-4298-8196-22b93cf3a4a5","resolution":{"observed_at":"2026-08-05T14:22:34.921518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:34.929396Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.929396Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:59ef895d32df972697f1a1a0543030792d538451bd085456354f5d97a0f99cce","observation_id":"e06e53f3-5471-4168-a27e-2ec69f94e6b9","resolution":{"observed_at":"2026-08-05T14:22:34.929396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.839097Z","title":null,"venue":null,"work_id":"eef40f4d-6b23-4bdf-b44e-01f5a00af994","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.936490Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8a5e6af49611cc1a6727b035b94c4fb3bb1077e41821160840eea80ca1103ca2","observation_id":"97e1e6fe-145c-4741-a42c-4eeb4b78520c","resolution":{"observed_at":"2026-08-05T14:22:37.858409Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.808944Z","title":null,"venue":null,"work_id":"491cfd38-9ccd-4217-85b4-65f6ef9d9c66","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.944264Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:be73b739c8d5ebbc64d0fbe1790d71cfbaabddaeabf193171166148ba8c6abef","observation_id":"4d6b3b27-c5ab-470c-8e64-c4e542ed0fed","resolution":{"observed_at":"2026-08-05T14:22:37.821035Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.771319Z","title":null,"venue":null,"work_id":"8c7f3caa-5a47-4c04-b45f-33a7803a68d8","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.951171Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:cf0df1678cbaf063eaf663886aa22af6f41c2b8fb4bd42eada9924ba635eaf6e","observation_id":"2aebcf10-c3a4-44a0-a15f-03c44ac8ef17","resolution":{"observed_at":"2026-08-05T14:22:37.782630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.742108Z","title":null,"venue":null,"work_id":"dd755341-813a-4fa4-b259-29aa4a0c2ce9","year":2009},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.957968Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:512cff99ab8cdc9a2fbb5e1266603c03b98db179838f61210e55c5e8f831677e","observation_id":"c6879fa0-dd3e-40f7-8bf6-6a30d6e34016","resolution":{"observed_at":"2026-08-05T14:22:37.750245Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.717205Z","title":null,"venue":null,"work_id":"cc2a417c-18c2-4ef8-8ea8-3d8953f586f3","year":2019},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.969573Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bfe6548f2aee094777369362ae8d120f187d63e3ca73bf376b0c83bdd9a61a9a","observation_id":"9d99f4a3-963f-4054-b1f4-1ae2c0777446","resolution":{"observed_at":"2026-08-05T14:22:37.725756Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.692585Z","title":null,"venue":null,"work_id":"e68546a0-8bfe-4a41-8933-0ed19e70da53","year":1912},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.982812Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:ce4bfbf6da2b5584b2b1d9dc978b6c2265404016af6a4b8fd18e186c0b292bf0","observation_id":"b6cf88f4-fecf-420d-aee4-41ee2e0ea9da","resolution":{"observed_at":"2026-08-05T14:22:37.700145Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.672823Z","title":null,"venue":null,"work_id":"4a985acc-304d-4fa3-8bf2-47473c651e03","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.990856Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:e49387e470ccc4b13542817f3691fa2a956aba1b47ccaa3508c4a792a564784e","observation_id":"5add2129-a16f-492e-b77f-918dee0961ca","resolution":{"observed_at":"2026-08-05T14:22:37.678350Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-07T13:56:34.167869Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-08-05T14:22:34.998918Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.998918Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:58536ae5f99b9e01e5ec39101aa7efc793c15b0574c971127ee76d534919306e","observation_id":"38b4640a-2e38-4d20-8941-3b3391ee1ab6","resolution":{"observed_at":"2026-08-05T14:22:34.998918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.649738Z","title":null,"venue":null,"work_id":"4a288ca6-ebcf-4568-bac6-356a13becefa","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.006721Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:58c8fbd23a038fa4d105614a438fdc28bcc488fd1fb71d1e26a6720862329ce8","observation_id":"93b06833-9d3b-4a4a-8189-e8aa38e6fff6","resolution":{"observed_at":"2026-08-05T14:22:37.655899Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.627901Z","title":null,"venue":null,"work_id":"292260e5-13f2-496e-89e6-096127c195c7","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.013296Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d6bae9b738bc187f3b9ef5804b1a90c699152551fb72db1a4381973472452b6f","observation_id":"00c841a0-61a1-4df3-8b1f-bc253e192ac4","resolution":{"observed_at":"2026-08-05T14:22:37.633806Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.01604","last_updated":"2024-11-03T15:20:21Z","snapshot_observed_at":"2026-07-06T19:44:29.795086Z","submitted_at":"2024-11-03T15:20:21Z","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.01604","snapshot_observed_at":"2026-08-05T14:22:35.020047Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.020047Z"},"links":{"cited_paper":"/paper/2411.01604","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:cf9dbbeda0e861817d1989aa1e8e60bf192fc44c4483ccf6a7677731f3dbd08e","observation_id":"c4ecd9d8-f779-4ac5-98bf-0502fc84f25b","resolution":{"observed_at":"2026-08-05T14:22:35.020047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21218","last_updated":"2025-06-25T09:01:38Z","snapshot_observed_at":"2026-07-06T19:40:57.049203Z","submitted_at":"2024-10-28T17:02:12Z","title":"Lifting the Veil on Composition, Risks, and Mitigations of the Large Language Model Supply Chain","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21218","snapshot_observed_at":"2026-08-05T14:22:35.036578Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.036578Z"},"links":{"cited_paper":"/paper/2410.21218","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8cf81f2348dd234c3b59061aface02249c4a005e5d2827026b53aff547d40bc0","observation_id":"5e20c8c8-911f-4ba2-970b-00be330bbbdc","resolution":{"observed_at":"2026-08-05T14:22:35.036578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.605974Z","title":null,"venue":null,"work_id":"5c88d702-9ab9-407d-afbb-79799d827570","year":2022},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.047079Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:3657b2fd7b5c4cae8fd0f8e90ca5830d49c292dab00b29eeb50199fdd2282d0b","observation_id":"824260a6-39c4-4b9e-a922-0400d3b8debd","resolution":{"observed_at":"2026-08-05T14:22:37.613121Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.055123Z","title":null,"venue":null,"work_id":null,"year":1958},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.055123Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:bc5c7372a5d3ed1eba753fc21c62a6db2a0c91331c7758d7b97221e00a0008bc","observation_id":"2f89a841-29ea-4201-a40d-91c6341dd70e","resolution":{"observed_at":"2026-08-05T14:22:35.055123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.575547Z","title":null,"venue":null,"work_id":"520618c5-af18-4d4a-9b29-14b3e1da874c","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.063813Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:71c69748569c23c264a786f51de6e719ad0c0a6393cdd1ea9d4476dc379bf688","observation_id":"f611e6f8-b73f-405c-a8d3-6dd0f4712e1e","resolution":{"observed_at":"2026-08-05T14:22:37.585206Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.549105Z","title":null,"venue":null,"work_id":"c6512afd-114c-430e-803c-be08e388a0ff","year":2018},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.071767Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:5427ea1cf290eda6f1c8a5e0922266460f7662000ffcd171c6a5b1048ec2bb81","observation_id":"ace03ee4-dffb-4c2b-8678-0d00665437d0","resolution":{"observed_at":"2026-08-05T14:22:37.557823Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08688","last_updated":"2024-06-12T23:04:13Z","snapshot_observed_at":"2026-07-06T18:29:58.140132Z","submitted_at":"2024-06-12T23:04:13Z","title":"On Security Weaknesses and Vulnerabilities in Deep Learning Systems","version":1},"cited_work":{"arxiv_id":"2406.08688","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.08688","snapshot_observed_at":"2026-08-05T14:22:35.952336Z","title":"On Security Weaknesses and Vulnerabilities in Deep Learning Systems","venue":"cs.SE","work_id":"c0984c61-c74b-4870-918d-53e64bcf9bf8","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.078361Z"},"links":{"cited_paper":"/paper/2406.08688","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:477db84fa71ce9a1a54a27a83a6af5bdbecae58c3e811b8578c472cf11abbac5","observation_id":"c429e11e-f80f-4ea8-b1e3-95a2a099073b","resolution":{"observed_at":"2026-08-05T14:22:35.969263Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.526899Z","title":null,"venue":null,"work_id":"98d103cc-9126-4a19-bcb4-c08d5a940c66","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.083569Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:c5d0207bdebbee7c084d8e0cdd036c55ece5ef389e7843d6d84479333f201ce3","observation_id":"47b24b5f-ba80-402c-8484-dc4ccc5f089c","resolution":{"observed_at":"2026-08-05T14:22:37.533716Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.502836Z","title":null,"venue":null,"work_id":"b64eef9e-a232-48a2-ae2b-60ec24bc21be","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.092267Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:b4418b4f18683fea20120fcb9f6c094e6f251697c7bf2e76fb161c9613c19210","observation_id":"63dc20fd-ad31-404b-b84c-b90a3a9e2436","resolution":{"observed_at":"2026-08-05T14:22:37.512530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.100425Z","title":null,"venue":null,"work_id":null,"year":1947},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.100425Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:76b7e34b9a279b49664864d7455348c00d57b5dd01fc2ceee8e822ce6c66301c","observation_id":"635d2248-6d3a-42f0-8a6b-f974cf9e8041","resolution":{"observed_at":"2026-08-05T14:22:35.100425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.480877Z","title":null,"venue":null,"work_id":"16e1b543-2ab5-445a-bf01-ddfe20b4ceef","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.106569Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:e6d466b684b9b23c8575c0a8946990a8c178be0abd9b27b1f25da3a1365a37da","observation_id":"ed6bb5ba-d9b3-42b5-9fb4-3ba5fea693c6","resolution":{"observed_at":"2026-08-05T14:22:37.488241Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.449559Z","title":null,"venue":null,"work_id":"d7d66355-2015-49aa-870d-b9f110b20fee","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.113310Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4ec1ff541477437de6dc3c75aaa8ad5d9b11505aaed67b911cf221bd0d3680ec","observation_id":"55875464-fd29-4a5e-b4bd-73288edde31f","resolution":{"observed_at":"2026-08-05T14:22:37.459472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.121092Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.121092Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:feb8af7e051dd548db719100a354b68ed0fedb079fdccfd3c99829803cd277a1","observation_id":"0fa35ce0-3d18-4375-a048-7af30358ee54","resolution":{"observed_at":"2026-08-05T14:22:35.121092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.130724Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.130724Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d77f7f8c42580cbbe4c1fde0d32b4f14cc4c429788b3940e48c521fdf5553d7d","observation_id":"0589750b-09a1-48cc-8999-e31a779604ca","resolution":{"observed_at":"2026-08-05T14:22:35.130724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.139278Z","title":null,"venue":null,"work_id":null,"year":1900},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.139278Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:196346c518ae6686d13a35974f5b545c6aae0559459ff169f1d35dc51f0bd341","observation_id":"a42eb0c3-9017-43e5-baa5-6ae221da067b","resolution":{"observed_at":"2026-08-05T14:22:35.139278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.152041Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.152041Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8711064da5c34f462d6063efa35e36e7e845b605ea0772e0dd231563d425096c","observation_id":"583a284c-215a-4fc7-8f88-7f461b4c6629","resolution":{"observed_at":"2026-08-05T14:22:35.152041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.377682Z","title":null,"venue":null,"work_id":"62beda2e-018f-4fea-9175-b1d33af8613a","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.159670Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:aa2dfc4cfff52b8d24fd28f264910ca5e9d227e2182b6064180bd1005e9955a1","observation_id":"cb5e78d3-c496-411e-aa04-a4d7f7320208","resolution":{"observed_at":"2026-08-05T14:22:37.384766Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.346937Z","title":null,"venue":null,"work_id":"df71f43c-4e6d-421d-9325-9aa50748d777","year":2005},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.165548Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:c28bfcc5389261641c2d7dd796626895f6dda34acf20652b9c21e1e418fba6eb","observation_id":"9e22b64a-a6c9-4175-a602-e2c135363801","resolution":{"observed_at":"2026-08-05T14:22:37.355485Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.171599Z","title":"Shapiro and Martin B","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.171599Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:eaa6c958a7d64e2e594757c7d0f3d617abcb9339e377d9214c0fb8b9355a9ae2","observation_id":"1b7f912c-f975-4d07-a4f1-d8a3323f69d0","resolution":{"observed_at":"2026-08-05T14:22:35.171599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-07-06T16:34:11.453458Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-05T14:22:35.177263Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.177263Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2902217d4065bfd7891b25f25f69227f049e2b7b5100f37c099b5197e913058c","observation_id":"b68e77f6-7fa0-49d6-b4a4-7614bad807bc","resolution":{"observed_at":"2026-08-05T14:22:35.177263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.309112Z","title":null,"venue":null,"work_id":"9e55e097-748a-4ee7-a0c0-fce9413e77f4","year":2025},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.186730Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8a17e18fe1c26cf32942ecfb7fbbcde468617dc245be1f709b48acaab87f86e1","observation_id":"260757d9-3c55-4c62-9ec4-7497d19c8db8","resolution":{"observed_at":"2026-08-05T14:22:37.324688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.264521Z","title":null,"venue":null,"work_id":"21472c43-2e02-4c72-8194-9a32a66b9376","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.194536Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2bf37ecb158ef1e6edafa1dee2a90dfb51f800fa23d35ef10154b27b97d75e1a","observation_id":"71d2d690-e084-4bb8-9610-76493c1db655","resolution":{"observed_at":"2026-08-05T14:22:37.271343Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.232192Z","title":null,"venue":null,"work_id":"59d88f90-982d-4939-96b0-71dc327b0267","year":1961},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.200707Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:71410453d394f071226bcbc42f65fb739065facd866097894b83ab527643d3de","observation_id":"53837031-1f74-4af4-8ad6-d9a10dd27036","resolution":{"observed_at":"2026-08-05T14:22:37.240738Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.191355Z","title":null,"venue":null,"work_id":"8fbf3f4c-3a0c-4d50-a872-cffc68746b69","year":2022},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.205951Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:1063e3437fad62e77c5938cfba3050f84062b23734fa84a38d137b4d01808f48","observation_id":"c7804708-7ffc-47d6-ae88-793a1923b084","resolution":{"observed_at":"2026-08-05T14:22:37.198320Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-05T14:22:35.211159Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.211159Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:d49f318418e68964782067f2c14261273c2ce8fd7577cc15b1e9ad0d4c9e3e15","observation_id":"f4a498ec-a83a-481c-b25d-f7a751e15a17","resolution":{"observed_at":"2026-08-05T14:22:35.211159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.218301Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.218301Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:86fcc28938b9d3870741ce97b465d6f9c0c6bb46ddf8adaeb98e87f48b8982df","observation_id":"75cc4572-06d3-4a38-867b-6f1898d0d411","resolution":{"observed_at":"2026-08-05T14:22:35.218301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.141958Z","title":null,"venue":null,"work_id":"47bf78eb-fa51-4680-9852-32ff66f8618f","year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.225458Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4cc478cc2f2be38f8908d724da3186260abab5d534d53a631e6bd9cb58a1e75b","observation_id":"aabfdd36-75b3-41d5-8139-6816531abb1b","resolution":{"observed_at":"2026-08-05T14:22:37.149887Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.12736","last_updated":"2024-11-26T13:35:05Z","snapshot_observed_at":"2026-08-03T14:42:58.490364Z","submitted_at":"2024-04-19T09:29:53Z","title":"Large Language Model Supply Chain: A Research Agenda","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.12736","snapshot_observed_at":"2026-08-05T14:22:35.236922Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.236922Z"},"links":{"cited_paper":"/paper/2404.12736","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:8b45d001698310b2c39c4d6c7540130b1e929e9edf39b71a71dc61c397aa9400","observation_id":"6ed0373c-8829-4ee9-af58-d07dbd8f5f32","resolution":{"observed_at":"2026-08-05T14:22:35.236922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.243738Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.243738Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:b9bf87e10813ffd17e00215b4f07db61a8703a47c7c11d39e2104b456924ce7d","observation_id":"3aaca814-df29-417f-82e9-c21b9fe82b77","resolution":{"observed_at":"2026-08-05T14:22:35.243738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.079664Z","title":null,"venue":null,"work_id":"b5516cac-8ace-41ab-8946-282ee4a117d7","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.258942Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:35034e896d20df5a48bcebb8592d5b01e5d763d33d3ec70140d404769b4b2bfd","observation_id":"95474461-0b4e-47b3-868b-793929400d95","resolution":{"observed_at":"2026-08-05T14:22:37.088363Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.266023Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.266023Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:6c2a319ac678142fc0702d56f11ea22740d12c6147ec8edb23c6afc87ec999ad","observation_id":"fece3f9a-99d0-48a4-babf-0dae0577131e","resolution":{"observed_at":"2026-08-05T14:22:35.266023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:37.023601Z","title":null,"venue":null,"work_id":"65360fc1-70d9-4368-a71f-525d9fd918c9","year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.283449Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:2dc414895ce8d6ab330e6dc6528249c13642f57828cf24e06ef27c9c37c8c753","observation_id":"a8e28cc1-c928-48d3-b11a-b4e55714e62c","resolution":{"observed_at":"2026-08-05T14:22:37.033182Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6237.31177","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:35.492885Z","title":null,"venue":null,"work_id":"0fc72331-1ad3-4d58-bae6-3edafbedd1b2","year":2017},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.288542Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:7eb7a87501db3c5086222058ba9653352557c09d2da0f41a864a4223b4e01462","observation_id":"92e321b3-68dd-4c20-9046-ef831a11342f","resolution":{"observed_at":"2026-08-05T14:22:35.508260Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:22:38.307817Z","title":"Canadian journal of statistics 27, 1 (1999), 3–23","venue":null,"work_id":"85330caf-aca6-4cbc-aaa5-7abbf6acb556","year":1999},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":1999,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:34.776466Z"},"links":{"citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:cf7fe4d3ef389cb8d3e946fb1ab375a2ac84cc239179df71a6560aae0755fcab","observation_id":"ebaa1122-d467-4003-9bec-9f54f3dcebaf","resolution":{"observed_at":"2026-08-05T14:22:38.364185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17564","last_updated":"2023-12-21T06:21:11Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-30T17:30:36Z","title":"BloombergGPT: A Large Language Model for Finance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17564","snapshot_observed_at":"2026-08-05T14:22:35.249302Z","title":"arXiv preprint arXiv:2303.17564 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.249302Z"},"links":{"cited_paper":"/paper/2303.17564","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:4e811b1b85862d0e5e76d44f79a47a7ebf2d79b305bdd0d76661410fb3d025eb","observation_id":"c4455567-e132-4b2e-9138-ea2ff0096265","resolution":{"observed_at":"2026-08-05T14:22:35.249302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.07506","last_updated":"2024-03-12T10:43:26Z","snapshot_observed_at":"2026-07-06T17:43:10.476384Z","submitted_at":"2024-03-12T10:43:26Z","title":"Robustness, Security, Privacy, Explainability, Efficiency, and Usability of Large Language Models for Code","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.07506","snapshot_observed_at":"2026-08-05T14:22:35.277775Z","title":"arXiv preprint arXiv:2403.07506 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T14:22:35.277775Z"},"links":{"cited_paper":"/paper/2403.07506","citing_paper":"/paper/2508.21417"},"observation_digest":"sha256:55a35254186f835bdcefe26ad386f1bb961235e83da7d607ffba377bda266200","observation_id":"5f37db52-898f-4b15-9cb3-45d06a815f3a","resolution":{"observed_at":"2026-08-05T14:22:35.277775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.21417","last_updated":"2025-08-29T08:38:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T14:22:32.176043Z","submitted_at":"2025-08-29T08:38:58Z","title":"An Empirical Study of Vulnerable Package Dependencies in LLM Repositories"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":66,"verified_exact":3,"verified_fuzzy":3},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 0 inbound Pith citation observations for arXiv:2508.21417."}