{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:3C47NEI4RCVINXRZV6LLDZI6EG","short_pith_number":"pith:3C47NEI4","schema_version":"1.0","canonical_sha256":"d8b9f6911c88aa86de39af96b1e51e21a0214df296548c791a5a1979b041aff6","source":{"kind":"arxiv","id":"2108.06262","version":1},"attestation_state":"computed","paper":{"title":"Contrasting Third-Party Package Management User Experience","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Bodin Chinthanet, Christoph Treude, Kenichi Matsumoto, Raula Gaikovina Kula, Syful Islam, Takashi Ishio","submitted_at":"2021-08-13T14:19:33Z","abstract_excerpt":"The management of third-party package dependencies is crucial to most technology stacks, with package managers acting as brokers to ensure that a verified package is correctly installed, configured, or removed from an application. Diversity in technology stacks has led to dozens of package ecosystems with their own management features. While recent studies have shown that developers struggle to migrate their dependencies, the common assumption is that package ecosystems are used without any issue. In this study, we explore 13 package ecosystems to understand whether their features correlate wi"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2108.06262","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-08-13T14:19:33Z","cross_cats_sorted":[],"title_canon_sha256":"4c3eda5c8ac0a781d345580d6724f96e66fca75e279399b22f7a6d1d0fd6d9d9","abstract_canon_sha256":"38b043c56d78610798e78651569e7457e00947add4d1591db43401d8906105af"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:05:39.091673Z","signature_b64":"Vv4XOJw9gHfLkdOUgACpRjbQfcJTFQImu/J5RNxeqrxL+LPo7ha4Uw2tC0y/UTOWJNcbnRB2t46kLDmLfAqcBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d8b9f6911c88aa86de39af96b1e51e21a0214df296548c791a5a1979b041aff6","last_reissued_at":"2026-07-05T03:05:39.091258Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:05:39.091258Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Contrasting Third-Party Package Management User Experience","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Bodin Chinthanet, Christoph Treude, Kenichi Matsumoto, Raula Gaikovina Kula, Syful Islam, Takashi Ishio","submitted_at":"2021-08-13T14:19:33Z","abstract_excerpt":"The management of third-party package dependencies is crucial to most technology stacks, with package managers acting as brokers to ensure that a verified package is correctly installed, configured, or removed from an application. Diversity in technology stacks has led to dozens of package ecosystems with their own management features. While recent studies have shown that developers struggle to migrate their dependencies, the common assumption is that package ecosystems are used without any issue. In this study, we explore 13 package ecosystems to understand whether their features correlate wi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.06262","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.06262/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2108.06262","created_at":"2026-07-05T03:05:39.091319+00:00"},{"alias_kind":"arxiv_version","alias_value":"2108.06262v1","created_at":"2026-07-05T03:05:39.091319+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.06262","created_at":"2026-07-05T03:05:39.091319+00:00"},{"alias_kind":"pith_short_12","alias_value":"3C47NEI4RCVI","created_at":"2026-07-05T03:05:39.091319+00:00"},{"alias_kind":"pith_short_16","alias_value":"3C47NEI4RCVINXRZ","created_at":"2026-07-05T03:05:39.091319+00:00"},{"alias_kind":"pith_short_8","alias_value":"3C47NEI4","created_at":"2026-07-05T03:05:39.091319+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG","json":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG.json","graph_json":"https://pith.science/api/pith-number/3C47NEI4RCVINXRZV6LLDZI6EG/graph.json","events_json":"https://pith.science/api/pith-number/3C47NEI4RCVINXRZV6LLDZI6EG/events.json","paper":"https://pith.science/paper/3C47NEI4"},"agent_actions":{"view_html":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG","download_json":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG.json","view_paper":"https://pith.science/paper/3C47NEI4","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2108.06262&json=true","fetch_graph":"https://pith.science/api/pith-number/3C47NEI4RCVINXRZV6LLDZI6EG/graph.json","fetch_events":"https://pith.science/api/pith-number/3C47NEI4RCVINXRZV6LLDZI6EG/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG/action/timestamp_anchor","attest_storage":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG/action/storage_attestation","attest_author":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG/action/author_attestation","sign_citation":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG/action/citation_signature","submit_replication":"https://pith.science/pith/3C47NEI4RCVINXRZV6LLDZI6EG/action/replication_record"}},"created_at":"2026-07-05T03:05:39.091319+00:00","updated_at":"2026-07-05T03:05:39.091319+00:00"}