{"as_of":"2026-08-08T02:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa7547e0f52d12ee6412be368cd4383ce1b0530cad74f85e8459d9cf3044ba98","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T12:45:49.867742Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.01255/citation-record","integrity":"/paper/2509.01255/integrity","json":"/paper/2509.01255/citation-record.json","paper":"/paper/2509.01255"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.254425Z","title":"Defense-in-depth security strategy in log4j vulnerability analysis","venue":null,"work_id":"509c3fc5-d2f3-42d9-80c8-ba6024d4ffa8","year":2022},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.775363Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:dbc05796f3c84cafb5eb0e013984c57e7e290c19b3e8850830ccccb3620f0c63","observation_id":"9088a0f0-8cdf-46f6-a164-a9f2ef3f5042","resolution":{"observed_at":"2026-08-05T12:45:50.258692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.240835Z","title":"Navigating the solarwinds supply chain attack.The Procurement Lawyer, 56(2), 2021","venue":null,"work_id":"a5f9c737-2a9a-4d71-a472-2658c830e7b4","year":2021},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.779984Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:e92a41c51b1ca62aafc82bf06570b27e4a186bf3eef127a55dd9b52814d90909","observation_id":"ab11f252-68f0-46ab-a41e-ae14c49a2fbd","resolution":{"observed_at":"2026-08-05T12:45:50.245657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.229104Z","title":"A systematic analysis of the event- stream incident","venue":null,"work_id":"f2e2c6ba-7f84-439d-ba51-6dcc652deba5","year":2022},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.784143Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:8e24b6d6f49a067e8689107699133370a96a70bd17442f8144985a5866d9ac40","observation_id":"c71e7b82-a776-482a-946e-68953164b9f1","resolution":{"observed_at":"2026-08-05T12:45:50.233364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.214961Z","title":"Log4shell: Redefining the web attack surface","venue":null,"work_id":"564da34e-e981-4145-a48a-7796e963aa25","year":2022},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.788550Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:a0322e75fd49977c972eb51d21a6ff9daf244b83dba3a1158115d7c163b2862b","observation_id":"59d326f2-3d6d-457e-81f9-90679e4ce408","resolution":{"observed_at":"2026-08-05T12:45:50.220652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.201163Z","title":"Software bills of materials are required","venue":null,"work_id":"783400e2-40f2-4741-a5dc-c0b21a84242c","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.792777Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:05f26f44eb89fb29d0ebe2db41073998ed94a63a18193ed610ede35998e8055a","observation_id":"f9841bd7-6a19-426a-91ae-0751ade36b3f","resolution":{"observed_at":"2026-08-05T12:45:50.205373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.187713Z","title":"The state of software bill of materials (sbom) and cybersecurity readiness","venue":null,"work_id":"3a1a239f-b2fd-4194-b816-37a69962d41a","year":2022},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.796802Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:4653438e9067430dace52f3d96f8d000fa14bebe7b1d026e7ce5e051f5cf5719","observation_id":"e07f69da-b005-4444-ad2a-fae259603f80","resolution":{"observed_at":"2026-08-05T12:45:50.194197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.177033Z","title":"Charting the path to sbom adoption: A business stakeholder-centric approach","venue":null,"work_id":"ef66bda5-c5ee-43f1-80d7-54d5b0559158","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.801818Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:889b50a17a30e8a9c602c0cfab1f1a4bc0b742852ffb9b90b648ae8c55eea82c","observation_id":"5948e697-d743-41d5-a06a-c42506bc63ac","resolution":{"observed_at":"2026-08-05T12:45:50.180643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.166043Z","title":"Boms away! inside the minds of stakeholders: A comprehensive study of bills of materials for software systems","venue":null,"work_id":"52e7ecac-5c62-4273-9cef-8cccd22ee73b","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.805728Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:929dbc9b9b658cb2d0b9bf3fa0258e0994a624e00a90298f702ccf69d69693f2","observation_id":"34250fa2-8a44-452b-ae63-3a142d6524b0","resolution":{"observed_at":"2026-08-05T12:45:50.169839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.154680Z","title":"An empirical study on software bill of materials: Where we stand and the road ahead","venue":null,"work_id":"a6be3f16-e46d-4009-9cfc-d499a6560dd4","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.809454Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:e3e84e8067881617fd73ed948b77c5ad686a70636b7711cb9f64c460ce510687","observation_id":"65c0b072-5a20-4d40-8a5f-0c0ae47c8442","resolution":{"observed_at":"2026-08-05T12:45:50.158438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.143866Z","title":"A viewpoint on knowing software: Bill of materials quality when you see it","venue":null,"work_id":"0c5bd19b-7dca-4f94-8b58-06437bd34e40","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.812769Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:e561938bd58d3499fcb566346fa5b07493b8d18b1720c27fab988d3cd72b3d7e","observation_id":"f845838a-9c81-4c51-9b73-79db145626ca","resolution":{"observed_at":"2026-08-05T12:45:50.148157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11151","last_updated":"2024-02-17T00:36:20Z","snapshot_observed_at":"2026-07-06T17:31:29.199601Z","submitted_at":"2024-02-17T00:36:20Z","title":"A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11151","snapshot_observed_at":"2026-08-05T12:45:49.817003Z","title":"A landscape study of open source and proprietary tools for software bill of materials (sbom)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.817003Z"},"links":{"cited_paper":"/paper/2402.11151","citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:a8bf36515eb761f3f91e11e4eb990fc399e0830672f733634752863e973941fb","observation_id":"976fbfb0-2805-4811-b0f9-535702b41874","resolution":{"observed_at":"2026-08-05T12:45:49.817003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.132377Z","title":"Assessing security risks of software supply chains using software bill of materials","venue":null,"work_id":"0b1c0217-a3bb-4b51-a242-9c749744741e","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.821742Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:5268b966972172d58ae20243161f02bb1016259348fb9997675c594e42dd8825","observation_id":"871e0260-14f5-490e-bac1-f6c783520fb5","resolution":{"observed_at":"2026-08-05T12:45:50.136390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.119883Z","title":"Challenges of producing software bill of materials for java","venue":null,"work_id":"4328d0f0-1a04-4904-a85b-ce7066e6adec","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.825558Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:6f41c20ecb45fa071ed14a4208eec938c0d3794deb9b1d393e37a9b5afa3a2ae","observation_id":"a2de7471-3045-4c9c-8d36-fe7424b9b668","resolution":{"observed_at":"2026-08-05T12:45:50.124160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.107093Z","title":"On the correctness of metadata-based sbom generation: A differential analysis approach","venue":null,"work_id":"9c63e778-d15d-4b81-a40b-6598f249e7a1","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.829502Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:6d5a11a00af88ee226df075a889f60994759b0a31cd356874fcd3d894a8f9e94","observation_id":"9bbedf07-a7bd-44b5-b9bc-fe060e197ec5","resolution":{"observed_at":"2026-08-05T12:45:50.111391Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.095812Z","title":"Sbom generation tools under microscope: A focus on the npm ecosystem","venue":null,"work_id":"ee37b682-97b1-49a1-bea7-ab9a1fd4843c","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.832862Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:a2c4829d1bd384ff514b5fd127107b318857769e5cfab9e59b00b50caac293db","observation_id":"fdb4dfc1-74e9-4345-890f-24a04f3fe9ba","resolution":{"observed_at":"2026-08-05T12:45:50.099433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.084665Z","title":"License usage and changes: a large-scale study on github","venue":null,"work_id":"e5d9cc59-28a5-4791-accb-1bcdd8689f66","year":2017},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.836310Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:5f56f6e147d9c0927bc0893e9854993e08dad9caded4f9063724448c50e5f761","observation_id":"4f82ccaf-9388-46a0-ae6c-5ae5fa4891f1","resolution":{"observed_at":"2026-08-05T12:45:50.088406Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"web/2024090","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:49.966266Z","title":"Types of software bill of materials (sbom)","venue":null,"work_id":"4ce76127-011e-4150-99f2-b8e1de9fb2d2","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.839723Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:00d38cbfb247ddf41f50851ea8f94598e45d139b1e2873da0a8823376d557dc7","observation_id":"72dd92e0-fb5d-4da7-a75d-f3a67e7bb357","resolution":{"observed_at":"2026-08-05T12:45:49.975461Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.073983Z","title":"Software bill of materials adoption: a mining study from github","venue":null,"work_id":"83377487-fb47-4366-a8b7-4fbd04b0c3b2","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.843862Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:9d66afe067086322c1b14d8456b2748fdf6355acd4afe82c02f8f1ab84e1f100","observation_id":"d3af0741-a9dc-45a9-ab98-688169701424","resolution":{"observed_at":"2026-08-05T12:45:50.077749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.064031Z","title":"Wild sboms: a large-scale dataset of software bills of materials from public code, 2025","venue":null,"work_id":"0fac92e1-aa6e-4a90-ac2b-ec077447fcf8","year":2025},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.847300Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:ee78fdb97fce6ef7b427b3a38469d7145531e43be70b2859ed4cc46becf604e4","observation_id":"91ceb5f2-cc3a-4743-8f6e-53a6f7933744","resolution":{"observed_at":"2026-08-05T12:45:50.067762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.052510Z","title":"Mining software repositories to assist developers and support managers","venue":null,"work_id":"9a9f5930-3dff-407e-8cd3-a29433737266","year":2006},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.850522Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:212355a49a6a7efd81f0e3a6eead353c0b37830a98b2eda135ad8948330d25f8","observation_id":"a55d23a4-d2d2-4098-8348-a271fec7f2a7","resolution":{"observed_at":"2026-08-05T12:45:50.056867Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.041491Z","title":"Determining sample size; how to calculate survey sample size","venue":null,"work_id":"b175589c-18c1-4abe-b8eb-ad0eae32c52b","year":2017},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.854208Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:c4457a7f76e73b73d2dcdaabcefe5f0522446828542cb53ae5fc4e495084fbf7","observation_id":"a331f787-6e4d-4355-9ee9-e3fa7b6056c5","resolution":{"observed_at":"2026-08-05T12:45:50.044913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.030480Z","title":"On the way to SBOMs: Investigating design issues and solutions in practice","venue":null,"work_id":"d923088f-88d3-4380-a19a-9ae662a4f9f4","year":2024},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.857640Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:1032a93bffb2cdd9e2e435c8301dcec0481d25f0c26ec93cfe49baa7efe331a1","observation_id":"3696b2a3-7708-4af0-b38b-38b76077c584","resolution":{"observed_at":"2026-08-05T12:45:50.034581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.018610Z","title":"Memory error detection in security testing","venue":null,"work_id":"006b26fb-1a0f-43a7-b45a-27531a0ba5ee","year":2021},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.860794Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:68add8ef82ac28b947221ec0be60d22c099fcc78fd5c6e152a7a87f599070bb5","observation_id":"7fe28f16-db89-45b5-a823-5eae7628ae0d","resolution":{"observed_at":"2026-08-05T12:45:50.022368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:50.006099Z","title":"Open source solutions for vulnerability assessment: A comparative analysis","venue":null,"work_id":"3c068b54-9619-47cc-a773-32f33278887e","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.864302Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:39ed8611842419215337d1ff4a3c0853a99c738742cc605ad98b4ce4ff2cb949","observation_id":"bdd3fe14-a5a2-41cf-a19b-6e97c19b2245","resolution":{"observed_at":"2026-08-05T12:45:50.010559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:45:49.993647Z","title":"Lidetector: License incompatibility detection for open source software","venue":null,"work_id":"4eeaa00a-d8b9-4afa-a79c-8132fb956b4b","year":2023},"citing_paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T12:45:49.867742Z"},"links":{"citing_paper":"/paper/2509.01255"},"observation_digest":"sha256:b2115b6abf23c667284f041e66d5ffc256846e3f66f4f9ec6a44b44b3b73e350","observation_id":"0950224c-edf9-4e54-a358-0ef4fe094f9e","resolution":{"observed_at":"2026-08-05T12:45:49.997614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2509.01255","last_updated":"2025-09-01T08:45:39Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-05T12:45:49.417273Z","submitted_at":"2025-09-01T08:45:39Z","title":"Policy-driven Software Bill of Materials on GitHub: An Empirical Study"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":1,"verified_fuzzy":23},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2509.01255."}