{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:2QUMHNTPWRYKEPZ2LGC3GEISXE","short_pith_number":"pith:2QUMHNTP","schema_version":"1.0","canonical_sha256":"d428c3b66fb470a23f3a5985b31112b934e52c575a4e75616dce6309cdb2ee28","source":{"kind":"arxiv","id":"2606.23495","version":1},"attestation_state":"computed","paper":{"title":"Ensuring Open Source Integrity: The Intersection of Copy-Based Reuse and License Compliance","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Audris Mockus, Bogdan Vasilescu, Mahmoud Jahanshahi","submitted_at":"2026-06-22T15:44:06Z","abstract_excerpt":"As other creative work, source code is protected by copyright. The owner can license the work, e.g., to permit copy and other kinds of use, and even start legal proceeding against license violators. However, source code can be reused in subtle ways, e.g., via copying without explicit package manager dependencies, making it hard to reason about potential license noncompliance. Using the World of Code infrastructure approximating the entirety of open source software, in this paper we create a copy-based code reuse network mapping direct copying across projects, and use it to quantify the extent "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.23495","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-06-22T15:44:06Z","cross_cats_sorted":[],"title_canon_sha256":"0113961c7330c7b28254e843a825f1a3d1acff372125bc1a0df2cf05bf7ff818","abstract_canon_sha256":"60b4a8b92c509c828e66f3fd9742c50f00dc2227b9947bdee74443991db1ce54"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T03:14:21.552755Z","signature_b64":"LhbrMfNFT/drYPosDFrm6TdsnqyN28xqr3tTboLtVrwnmlVJyRiyFKkbOeVH7B11EIwRYAxGbperIuO0xz8lBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d428c3b66fb470a23f3a5985b31112b934e52c575a4e75616dce6309cdb2ee28","last_reissued_at":"2026-06-23T03:14:21.552356Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T03:14:21.552356Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Ensuring Open Source Integrity: The Intersection of Copy-Based Reuse and License Compliance","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Audris Mockus, Bogdan Vasilescu, Mahmoud Jahanshahi","submitted_at":"2026-06-22T15:44:06Z","abstract_excerpt":"As other creative work, source code is protected by copyright. The owner can license the work, e.g., to permit copy and other kinds of use, and even start legal proceeding against license violators. However, source code can be reused in subtle ways, e.g., via copying without explicit package manager dependencies, making it hard to reason about potential license noncompliance. Using the World of Code infrastructure approximating the entirety of open source software, in this paper we create a copy-based code reuse network mapping direct copying across projects, and use it to quantify the extent "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.23495","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.23495/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.23495","created_at":"2026-06-23T03:14:21.552414+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.23495v1","created_at":"2026-06-23T03:14:21.552414+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.23495","created_at":"2026-06-23T03:14:21.552414+00:00"},{"alias_kind":"pith_short_12","alias_value":"2QUMHNTPWRYK","created_at":"2026-06-23T03:14:21.552414+00:00"},{"alias_kind":"pith_short_16","alias_value":"2QUMHNTPWRYKEPZ2","created_at":"2026-06-23T03:14:21.552414+00:00"},{"alias_kind":"pith_short_8","alias_value":"2QUMHNTP","created_at":"2026-06-23T03:14:21.552414+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE","json":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE.json","graph_json":"https://pith.science/api/pith-number/2QUMHNTPWRYKEPZ2LGC3GEISXE/graph.json","events_json":"https://pith.science/api/pith-number/2QUMHNTPWRYKEPZ2LGC3GEISXE/events.json","paper":"https://pith.science/paper/2QUMHNTP"},"agent_actions":{"view_html":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE","download_json":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE.json","view_paper":"https://pith.science/paper/2QUMHNTP","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.23495&json=true","fetch_graph":"https://pith.science/api/pith-number/2QUMHNTPWRYKEPZ2LGC3GEISXE/graph.json","fetch_events":"https://pith.science/api/pith-number/2QUMHNTPWRYKEPZ2LGC3GEISXE/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE/action/timestamp_anchor","attest_storage":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE/action/storage_attestation","attest_author":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE/action/author_attestation","sign_citation":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE/action/citation_signature","submit_replication":"https://pith.science/pith/2QUMHNTPWRYKEPZ2LGC3GEISXE/action/replication_record"}},"created_at":"2026-06-23T03:14:21.552414+00:00","updated_at":"2026-06-23T03:14:21.552414+00:00"}