Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-01T05:43:57.067781Z
Paper Citation Record · LEDGER
As of 10 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2607.22140.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-01T05:43:57.067781Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
47 of 47 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 18bfc2aa-7f04-471c-8a4d-d7b82c7003d3 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild The minimum elements for a software bill of materials (SBOM),
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1b6c2eac-934d-404f-934a-7d4b2d5634b7 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A large scale empirical analysis on the adherence gap between standards and tools in SBOM,
Reference 2
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d250ef59-4d2b-44ee-8ed8-76585d963079 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Software dark mat- ter: Gazing at uncharted files to navigate SBOM integrations,
Reference 3
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9b02ca80-81cc-4ce8-87cc-e5364113491b · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Wild SBOMs: a large-scale dataset of software bills of materials from public code,
Reference 4
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1b0997db-33b7-4390-bd85-419b68c6a7c7 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild In defense of soundiness: A manifesto,
Reference 5
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a486e688-d3e9-4284-b11f-bb104b1414bd · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild On closed world data bases,
Reference 6
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1b49fb71-14cc-4038-8d76-73abb857e3cf · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild CycloneDX bill of materials specification, version 1.6 — compositions,
Reference 7
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a927fa04-9f1b-4617-a92d-b1dbe0b99d65 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Executive order 14028: Improving the nation’s cybersecurity,
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 079adb1e-6fc8-47de-8523-fa2a12fe0952 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Regulation (eu) 2024/2847 on hor- izontal cybersecurity requirements for products with digital elements (cyber resilience act),
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f30bd26c-458d-40d6-8134-b51df0855e74 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Framing software component transparency: Establishing a com- mon software bill of materials (SBOM),
Reference 10
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 46aeaee3-9bd2-4efa-8a02-45c34b221e96 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Automated SBOM-driven vulnerability triage for IoT firmware: A lightweight pipeline for risk prioritization,
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 509225ab-9cb8-43d4-9533-e949e7fe8deb · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Exploit prediction scoring system (EPSS),
Reference 12
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 24535412-89ad-418e-b8fd-e0874a274881 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Con- flicting scores, confusing signals: An empirical study of vulnerability scoring systems,
Reference 13
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3e4ee2af-b4e6-4583-b5ff-3345160786fe · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Efficacy of EPSS in high severity CVEs found in KEV,
Reference 14
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b1a83ab0-484c-4264-84ff-432f7b79e830 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Towards predicting multi-vulnerability attack chains in software supply chains from software bill of materials graphs,
Reference 15
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f8f518d5-2d65-4297-8eaf-a661428440a3 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild The ripple effect of vul- nerabilities in Maven Central: Prevalence, propagation, and mitigation challenges,
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cfe1b183-d8bc-48ed-9ab2-8d7fdfd15da7 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Out of sight, still at risk: The lifecycle of transitive vulnerabilities in Maven,
Reference 17
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4ac7a2b1-c7f3-433f-af32-17a8ab699843 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Tracing vulnerabilities in Maven: A study of CVE lifecycles and dependency networks,
Reference 18
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c6a2e04f-643a-4e09-a5c1-f1abe70cd435 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Propagation- based vulnerability impact assessment for software supply chains,
Reference 19
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3fffc540-a711-4e80-8572-4eb73b4c50aa · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Vulnerable open source dependencies: Counting those that matter,
Reference 20
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f648ddb6-d84d-41cf-8c57-72aa11d66141 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Vuln4Real: A methodology for counting actually vulnerable dependencies,
Reference 21
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b6e8a34e-7c13-4aa9-9c61-cf2069d2efe7 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Backstabber’s knife collection: A review of open source software supply chain attacks,
Reference 22
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b66db5e6-e34a-4fec-9c8d-da0ebd4f3474 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Taxonomy of Attacks on Open-Source Software Supply Chains
Reference 23
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ff1538cf-e1b1-40ce-b1da-8e034130f1ec · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Small World with High Risks: A Study of Security Threats in the npm Ecosystem
Reference 24
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a477b02d-18fb-4ce4-b30b-1fe6fb33fa3a · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Syft: CLI tool and library for generating a software bill of materials from container images and filesystems,
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bc5f7918-51f3-4332-9dd6-14a204b1d59c · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild sbomqs: Quality metrics for SBOMs,
Reference 26
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 79c9543e-d3dc-4014-8766-dd409239610f · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A study of security vulnerabilities on Docker Hub,
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ac13e551-d454-44c7-9db6-e91c8194c4e4 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild On the relation between outdated docker containers, severity vulnerabilities, and bugs,
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ac530844-414c-457d-a0b1-484e1088a075 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A faster algorithm for betweenness centrality,
Reference 29
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cc2a03fe-ccc7-464f-9403-61d50ea13d6f · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild SBOMproof: Beyond alleged SBOM compliance for supply chain security of container images,
Reference 30
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d52b0bb-48d6-4196-ab33-ef7156469c25 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild The impact of SBOM generators on vulnerability assessment in Python: A comparison and a novel approach,
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f97d5b21-c9ac-4c6f-bf9b-b5836ee82b6e · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Accuracy evaluation of SBOM tools for web applications and system-level software,
Reference 32
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ff9d2013-bbe4-4471-9ada-08197239c905 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild The state of the SBOM tool ecosystems: A comparative analysis of SPDX and CycloneDX,
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ac638fe8-43cd-4548-94ef-b35427ef986e · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A landscape study of open source and proprietary tools for software bill of materials (SBOM),
Reference 34
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7a64809e-ccfb-495a-a0c7-f033e21b02d9 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Supply chain insecurity: The lack of integrity protection in SBOM solutions,
Reference 35
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 05fe10d4-239e-42f9-95f2-ec07c6410385 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A reality check on SBOM- based vulnerability management: An empirical study and a path for- ward,
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8f76d9a1-3a61-4c11-b5f5-fddffaca5062 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Software bills of materials in Maven Central,
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a6aa901d-e78e-4d0c-8243-d45463818028 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild SBOM dataset from 100 000+ public GitHub repositories,
Reference 38
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5fe971ab-eca6-42cb-aac4-7a0f3f03583a · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Soft- ware bill of materials in software supply chain security: A systematic literature review,
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2c6bc482-4173-41a6-910a-ac705c1a0fbf · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild An empirical comparison of dependency network evolution in seven software packaging ecosystems,
Reference 40
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation eac3059c-1185-4216-b9a5-f1912735be97 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Structure and evolution of package dependency networks,
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a02d2d2d-c137-449c-8e8c-93342bbc42d3 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Structural and connectiv- ity patterns in the Maven Central dependency network,
Reference 42
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d9cb6253-862e-4a80-bacd-bca92a215946 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild On the impact of outdated and vulnerable JavaScript pack- ages in Docker images,
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 68e64c74-44a2-434c-9563-d77f837ee9d8 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Beyond metadata: Code- centric and usage-based analysis of known vulnerabilities in open-source software,
Reference 44
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 659fded5-6e3b-4ed4-93b7-10e6d72b9b6c · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild A comparative study of vulner- ability reporting by software composition analysis tools,
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d5e80286-af1f-4fde-a718-f0c3d2eae4c1 · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Hidden dependencies and component variants in SBOM-based software composition analysis,
Reference 46
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b91bb2fe-1c73-4fba-8b66-818f88c4dd6a · outbound
No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Judge: Identifying, understanding, and evaluating sources of unsoundness in call graphs,
Reference 47
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
No inbound Pith citation observations are available.