{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:246ZZV7FE6YNFYRPWASM3AV6QG","short_pith_number":"pith:246ZZV7F","schema_version":"1.0","canonical_sha256":"d73d9cd7e527b0d2e22fb024cd82be81940c2807e263357a3046b699953b86b0","source":{"kind":"arxiv","id":"2103.06091","version":1},"attestation_state":"computed","paper":{"title":"Blindspots in Python and Java APIs Result in Vulnerable Code","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Elisha Myers, Jessie Elise Somerville, Natalie C. Ebner, Tian LIN, Yuriy Brun","submitted_at":"2021-03-10T14:44:19Z","abstract_excerpt":"Blindspots in APIs can cause software engineers to introduce vulnerabilities, but such blindspots are, unfortunately, common. We study the effect APIs with blindspots have on developers in two languages by replicating an 109-developer, 24-Java-API controlled experiment. Our replication applies to Python and involves 129 new developers and 22 new APIs. We find that using APIs with blindspots statistically significantly reduces the developers' ability to correctly reason about the APIs in both languages, but that the effect is more pronounced for Python. Interestingly, for Java, the effect incre"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2103.06091","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2021-03-10T14:44:19Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"a9498b2f6dfcaeb19a362166d13c15c7fc10b80d3806ee95812119f1e25935d6","abstract_canon_sha256":"e49165d728df5ceff9f4ae72eef431889a18f8e02c6a289367c345a91446dae7"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:22:01.513108Z","signature_b64":"v4p4y2cT/k/Z2kKJ4Yz3vix4gDr2fM1B4MMWlSaSJ5jYlV+h59zeu+dwKczWonoAn4yJeQKX2kFJ5LQ36Q76Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d73d9cd7e527b0d2e22fb024cd82be81940c2807e263357a3046b699953b86b0","last_reissued_at":"2026-07-05T02:22:01.512593Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:22:01.512593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Blindspots in Python and Java APIs Result in Vulnerable Code","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Elisha Myers, Jessie Elise Somerville, Natalie C. Ebner, Tian LIN, Yuriy Brun","submitted_at":"2021-03-10T14:44:19Z","abstract_excerpt":"Blindspots in APIs can cause software engineers to introduce vulnerabilities, but such blindspots are, unfortunately, common. We study the effect APIs with blindspots have on developers in two languages by replicating an 109-developer, 24-Java-API controlled experiment. Our replication applies to Python and involves 129 new developers and 22 new APIs. We find that using APIs with blindspots statistically significantly reduces the developers' ability to correctly reason about the APIs in both languages, but that the effect is more pronounced for Python. Interestingly, for Java, the effect incre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.06091","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.06091/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2103.06091","created_at":"2026-07-05T02:22:01.512660+00:00"},{"alias_kind":"arxiv_version","alias_value":"2103.06091v1","created_at":"2026-07-05T02:22:01.512660+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.06091","created_at":"2026-07-05T02:22:01.512660+00:00"},{"alias_kind":"pith_short_12","alias_value":"246ZZV7FE6YN","created_at":"2026-07-05T02:22:01.512660+00:00"},{"alias_kind":"pith_short_16","alias_value":"246ZZV7FE6YNFYRP","created_at":"2026-07-05T02:22:01.512660+00:00"},{"alias_kind":"pith_short_8","alias_value":"246ZZV7F","created_at":"2026-07-05T02:22:01.512660+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG","json":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG.json","graph_json":"https://pith.science/api/pith-number/246ZZV7FE6YNFYRPWASM3AV6QG/graph.json","events_json":"https://pith.science/api/pith-number/246ZZV7FE6YNFYRPWASM3AV6QG/events.json","paper":"https://pith.science/paper/246ZZV7F"},"agent_actions":{"view_html":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG","download_json":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG.json","view_paper":"https://pith.science/paper/246ZZV7F","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2103.06091&json=true","fetch_graph":"https://pith.science/api/pith-number/246ZZV7FE6YNFYRPWASM3AV6QG/graph.json","fetch_events":"https://pith.science/api/pith-number/246ZZV7FE6YNFYRPWASM3AV6QG/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG/action/timestamp_anchor","attest_storage":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG/action/storage_attestation","attest_author":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG/action/author_attestation","sign_citation":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG/action/citation_signature","submit_replication":"https://pith.science/pith/246ZZV7FE6YNFYRPWASM3AV6QG/action/replication_record"}},"created_at":"2026-07-05T02:22:01.512660+00:00","updated_at":"2026-07-05T02:22:01.512660+00:00"}