Pith. sign in

Paper Citation Record · LEDGER

Taxonomy of Attacks on Open-Source Software Supply Chains

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 4 inbound Pith citation observations for arXiv:2204.04008.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2204.04008 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 4 of 4 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 4 of 4 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-04T11:18:12.481191Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved0
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

15
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation b3c2752a-5338-4cfa-abd6-2cc8564517cb · inbound

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? cites this paper.

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating? Taxonomy of Attacks on Open-Source Software Supply Chains

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-04T11:18:12.481191Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T11:18:12.481191Z digest=sha256:3e31d5caa1db425035237304b308e13a565d381c6bfd1122ef0308b31346c906

Observation 416d288b-c0d5-458c-9d30-84521a9641bc · inbound

Building Digital Societies as Ecosystems: How Recognition and Repeat Relationships Sustain Cross-Community Work in Open Source cites this paper.

Building Digital Societies as Ecosystems: How Recognition and Repeat Relationships Sustain Cross-Community Work in Open Source Taxonomy of Attacks on Open-Source Software Supply Chains

Reference 11

Resolution
verified exact
arxiv_id, observed 2026-06-29T23:54:02.844820Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-29T23:47:41.301468Z digest=sha256:23282dbb409e418f0bcd44c21a1724bc6bf03cf712056fdc0ad8f72372f7769d

Observation a55e2d73-f277-43b5-9670-d1a1ca6e8348 · inbound

Beyond Takedown: Measuring Malicious Go Module Persistence in the Wild cites this paper.

Beyond Takedown: Measuring Malicious Go Module Persistence in the Wild Taxonomy of Attacks on Open-Source Software Supply Chains

Reference 27

Resolution
verified exact
arxiv_id, observed 2026-07-04T15:49:56.406200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-06-26T01:27:13.772082Z digest=sha256:1a5fb9084470312fa2bf0885eb1621010433c053431c0418bb9b142885749b61

Observation b66db5e6-e34a-4fec-9c8d-da0ebd4f3474 · inbound

No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild cites this paper.

No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild Taxonomy of Attacks on Open-Source Software Supply Chains

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-01T05:43:55.005464Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T05:43:55.005464Z digest=sha256:2e517a75bd28da7efff0c4160658f488a5dd044a4792cee81e8545a2e1b99b8d