Paper Citation Record · LEDGER

Policy-driven Software Bill of Materials on GitHub: An Empirical Study

As of 8 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2509.01255.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.01255 v1

Coverage vector

measured 25 of 25 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T12:45:49.867742Z

measured 25 of 25 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

25 of 25 outbound references displayed

verified exact1
verified fuzzy23
unresolved1
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 9088a0f0-8cdf-46f6-a164-a9f2ef3f5042 · outbound

This paper cites Defense-in-depth security strategy in log4j vulnerability analysis.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Defense-in-depth security strategy in log4j vulnerability analysis

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.258692Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation ab11f252-68f0-46ab-a41e-ae14c49a2fbd · outbound

This paper cites Navigating the solarwinds supply chain attack.The Procurement Lawyer, 56(2), 2021.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Navigating the solarwinds supply chain attack.The Procurement Lawyer, 56(2), 2021

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.245657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation c71e7b82-a776-482a-946e-68953164b9f1 · outbound

This paper cites A systematic analysis of the event- stream incident.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study A systematic analysis of the event- stream incident

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.233364Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 59d326f2-3d6d-457e-81f9-90679e4ce408 · outbound

This paper cites Log4shell: Redefining the web attack surface.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Log4shell: Redefining the web attack surface

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.220652Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation f9841bd7-6a19-426a-91ae-0751ade36b3f · outbound

This paper cites Software bills of materials are required.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Software bills of materials are required

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.205373Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation e07f69da-b005-4444-ad2a-fae259603f80 · outbound

This paper cites The state of software bill of materials (sbom) and cybersecurity readiness.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study The state of software bill of materials (sbom) and cybersecurity readiness

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.194197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 5948e697-d743-41d5-a06a-c42506bc63ac · outbound

This paper cites Charting the path to sbom adoption: A business stakeholder-centric approach.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Charting the path to sbom adoption: A business stakeholder-centric approach

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.180643Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 34250fa2-8a44-452b-ae63-3a142d6524b0 · outbound

This paper cites Boms away! inside the minds of stakeholders: A comprehensive study of bills of materials for software systems.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Boms away! inside the minds of stakeholders: A comprehensive study of bills of materials for software systems

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.169839Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 65c0b072-5a20-4d40-8a5f-0c0ae47c8442 · outbound

This paper cites An empirical study on software bill of materials: Where we stand and the road ahead.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study An empirical study on software bill of materials: Where we stand and the road ahead

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.158438Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation f845838a-9c81-4c51-9b73-79db145626ca · outbound

This paper cites A viewpoint on knowing software: Bill of materials quality when you see it.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study A viewpoint on knowing software: Bill of materials quality when you see it

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.148157Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 976fbfb0-2805-4811-b0f9-535702b41874 · outbound

This paper cites A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM).

Policy-driven Software Bill of Materials on GitHub: An Empirical Study A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-05T12:45:49.817003Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 871e0260-14f5-490e-bac1-f6c783520fb5 · outbound

This paper cites Assessing security risks of software supply chains using software bill of materials.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Assessing security risks of software supply chains using software bill of materials

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.136390Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation a2de7471-3045-4c9c-8d36-fe7424b9b668 · outbound

This paper cites Challenges of producing software bill of materials for java.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Challenges of producing software bill of materials for java

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.124160Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 9bbedf07-a7bd-44b5-b9bc-fe060e197ec5 · outbound

This paper cites On the correctness of metadata-based sbom generation: A differential analysis approach.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study On the correctness of metadata-based sbom generation: A differential analysis approach

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.111391Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation fdb4dfc1-74e9-4345-890f-24a04f3fe9ba · outbound

This paper cites Sbom generation tools under microscope: A focus on the npm ecosystem.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Sbom generation tools under microscope: A focus on the npm ecosystem

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.099433Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 4f82ccaf-9388-46a0-ae6c-5ae5fa4891f1 · outbound

This paper cites License usage and changes: a large-scale study on github.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study License usage and changes: a large-scale study on github

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.088406Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 72dd92e0-fb5d-4da7-a75d-f3a67e7bb357 · outbound

This paper cites Types of software bill of materials (sbom).

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Types of software bill of materials (sbom)

Reference 17

Resolution: verified exact; raw_fallback, observed 2026-08-05T12:45:49.975461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation d3af0741-a9dc-45a9-ab98-688169701424 · outbound

This paper cites Software bill of materials adoption: a mining study from github.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Software bill of materials adoption: a mining study from github

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.077749Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 91ceb5f2-cc3a-4743-8f6e-53a6f7933744 · outbound

This paper cites Wild sboms: a large-scale dataset of software bills of materials from public code, 2025.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Wild sboms: a large-scale dataset of software bills of materials from public code, 2025

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.067762Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation a55d23a4-d2d2-4098-8348-a271fec7f2a7 · outbound

This paper cites Mining software repositories to assist developers and support managers.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Mining software repositories to assist developers and support managers

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.056867Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation a331f787-6e4d-4355-9ee9-e3fa7b6056c5 · outbound

This paper cites Determining sample size; how to calculate survey sample size.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Determining sample size; how to calculate survey sample size

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.044913Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 3696b2a3-7708-4af0-b38b-38b76077c584 · outbound

This paper cites On the way to SBOMs: Investigating design issues and solutions in practice.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study On the way to SBOMs: Investigating design issues and solutions in practice

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.034581Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 7fe28f16-db89-45b5-a823-5eae7628ae0d · outbound

This paper cites Memory error detection in security testing.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Memory error detection in security testing

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.022368Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation bdd3fe14-a5a2-41cf-a19b-6e97c19b2245 · outbound

This paper cites Open source solutions for vulnerability assessment: A comparative analysis.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Open source solutions for vulnerability assessment: A comparative analysis

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:50.010559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Observation 0950224c-edf9-4e54-a358-0ef4fe094f9e · outbound

This paper cites Lidetector: License incompatibility detection for open source software.

Policy-driven Software Bill of Materials on GitHub: An Empirical Study Lidetector: License incompatibility detection for open source software

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T12:45:49.997614Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

Pith citing papers

No inbound Pith citation observations are available.