{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:6MTTG6IPE3J523VCRMJ6WDYEYN","short_pith_number":"pith:6MTTG6IP","canonical_record":{"source":{"id":"2403.15600","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-03-22T20:06:41Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"b1a449b769c17c04e8bdb79b378e138ae301b35301d5146a73f66499cbe7c2f4","abstract_canon_sha256":"cefd70f05f9ebfc202af92c9a5aab7c2f024b8cf99e88e6829bf5b394457fc18"},"schema_version":"1.0"},"canonical_sha256":"f32733790f26d3dd6ea28b13eb0f04c34b880b37d00562bdea4d412c410e64c4","source":{"kind":"arxiv","id":"2403.15600","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15600","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15600v1","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15600","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_12","alias_value":"6MTTG6IPE3J5","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_16","alias_value":"6MTTG6IPE3J523VC","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_8","alias_value":"6MTTG6IP","created_at":"2026-07-05T11:41:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:6MTTG6IPE3J523VCRMJ6WDYEYN","target":"record","payload":{"canonical_record":{"source":{"id":"2403.15600","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-03-22T20:06:41Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"b1a449b769c17c04e8bdb79b378e138ae301b35301d5146a73f66499cbe7c2f4","abstract_canon_sha256":"cefd70f05f9ebfc202af92c9a5aab7c2f024b8cf99e88e6829bf5b394457fc18"},"schema_version":"1.0"},"canonical_sha256":"f32733790f26d3dd6ea28b13eb0f04c34b880b37d00562bdea4d412c410e64c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:41:33.820401Z","signature_b64":"tRcpVFDsARC01GV4d6QE/WFaNkZhs/IHXLRvv1Qxk/5Ds2hx9/EiDOHPvLPqWyPBbw90krr11TODTI4D+3kcBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f32733790f26d3dd6ea28b13eb0f04c34b880b37d00562bdea4d412c410e64c4","last_reissued_at":"2026-07-05T11:41:33.819612Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:41:33.819612Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.15600","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"timTO/ssVkABTylEGO+N9PRUrBYRL0z3RyT++adFxmZlktcjFw9m3+MhEC1/nMd5g0ZVKHO/vcXsokPYc/+wCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T15:52:56.680244Z"},"content_sha256":"1d58c88ede076fa6dde5ef2b33d173c7d75b043fb758b605136a7ab554de7875","schema_version":"1.0","event_id":"sha256:1d58c88ede076fa6dde5ef2b33d173c7d75b043fb758b605136a7ab554de7875"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:6MTTG6IPE3J523VCRMJ6WDYEYN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Laurie Williams, Marcelo d'Amorim, Sivana Hamer","submitted_at":"2024-03-22T20:06:41Z","abstract_excerpt":"Sonatype's 2023 report found that 97% of developers and security leads integrate generative Artificial Intelligence (AI), particularly Large Language Models (LLMs), into their development process. Concerns about the security implications of this trend have been raised. Developers are now weighing the benefits and risks of LLMs against other relied-upon information sources, such as StackOverflow (SO), requiring empirical data to inform their choice. In this work, our goal is to raise software developers awareness of the security implications when selecting code snippets by empirically comparing"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15600","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.15600/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:41:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sXSsGPUb9in4Tsz6CzFW3wLOxDq8471YJvSSBN+53e6vzwAcjpXfK411Ik22VVeGKavnPDIdMQICjQEc0twpDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T15:52:56.680633Z"},"content_sha256":"2ab877c31f4337b3352965d781db86de3cf06c90f21aaf8fc893d7b94445dcae","schema_version":"1.0","event_id":"sha256:2ab877c31f4337b3352965d781db86de3cf06c90f21aaf8fc893d7b94445dcae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/bundle.json","state_url":"https://pith.science/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T15:52:56Z","links":{"resolver":"https://pith.science/pith/6MTTG6IPE3J523VCRMJ6WDYEYN","bundle":"https://pith.science/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/bundle.json","state":"https://pith.science/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6MTTG6IPE3J523VCRMJ6WDYEYN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6MTTG6IPE3J523VCRMJ6WDYEYN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cefd70f05f9ebfc202af92c9a5aab7c2f024b8cf99e88e6829bf5b394457fc18","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-03-22T20:06:41Z","title_canon_sha256":"b1a449b769c17c04e8bdb79b378e138ae301b35301d5146a73f66499cbe7c2f4"},"schema_version":"1.0","source":{"id":"2403.15600","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15600","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15600v1","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15600","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_12","alias_value":"6MTTG6IPE3J5","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_16","alias_value":"6MTTG6IPE3J523VC","created_at":"2026-07-05T11:41:33Z"},{"alias_kind":"pith_short_8","alias_value":"6MTTG6IP","created_at":"2026-07-05T11:41:33Z"}],"graph_snapshots":[{"event_id":"sha256:2ab877c31f4337b3352965d781db86de3cf06c90f21aaf8fc893d7b94445dcae","target":"graph","created_at":"2026-07-05T11:41:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.15600/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Sonatype's 2023 report found that 97% of developers and security leads integrate generative Artificial Intelligence (AI), particularly Large Language Models (LLMs), into their development process. Concerns about the security implications of this trend have been raised. Developers are now weighing the benefits and risks of LLMs against other relied-upon information sources, such as StackOverflow (SO), requiring empirical data to inform their choice. In this work, our goal is to raise software developers awareness of the security implications when selecting code snippets by empirically comparing","authors_text":"Laurie Williams, Marcelo d'Amorim, Sivana Hamer","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-03-22T20:06:41Z","title":"Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15600","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1d58c88ede076fa6dde5ef2b33d173c7d75b043fb758b605136a7ab554de7875","target":"record","created_at":"2026-07-05T11:41:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cefd70f05f9ebfc202af92c9a5aab7c2f024b8cf99e88e6829bf5b394457fc18","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-03-22T20:06:41Z","title_canon_sha256":"b1a449b769c17c04e8bdb79b378e138ae301b35301d5146a73f66499cbe7c2f4"},"schema_version":"1.0","source":{"id":"2403.15600","kind":"arxiv","version":1}},"canonical_sha256":"f32733790f26d3dd6ea28b13eb0f04c34b880b37d00562bdea4d412c410e64c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f32733790f26d3dd6ea28b13eb0f04c34b880b37d00562bdea4d412c410e64c4","first_computed_at":"2026-07-05T11:41:33.819612Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:41:33.819612Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tRcpVFDsARC01GV4d6QE/WFaNkZhs/IHXLRvv1Qxk/5Ds2hx9/EiDOHPvLPqWyPBbw90krr11TODTI4D+3kcBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:41:33.820401Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.15600","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1d58c88ede076fa6dde5ef2b33d173c7d75b043fb758b605136a7ab554de7875","sha256:2ab877c31f4337b3352965d781db86de3cf06c90f21aaf8fc893d7b94445dcae"],"state_sha256":"d5929303623f736a37daba773837fc4d5e0819f215ed12ff948de0fd788ac337"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"854GUok0ydbyyISquSshw9mvYY4ZOuPRSawFvGEZeCUtBZySp5bWzO4BjZ2C8w6LZC7dMLoVpd2bf6MOQpreAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T15:52:56.682917Z","bundle_sha256":"723726368430188400d59e68e09301ee75fbb099c824697ca2e81b5d8bc5b699"}}