Pith Number

pith:BKQF2LF3

pith:2023:BKQF2LF3YOZEXCAKFSZYQRCQAY

not attested not anchored not stored refs pending

On the Effect of Transitivity and Granularity on Vulnerability Propagation in the Maven Ecosystem

Amir M. Mir, Mehdi Keshani, Sebastian Proksch

arxiv:2301.07972 v1 · 2023-01-19 · cs.SE

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{BKQF2LF3YOZEXCAKFSZYQRCQAY}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

1 paper in Pith

Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks

Receipt and verification

First computed	2026-07-05T05:34:21.109969Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

0aa05d2cbbc3b24b880a2cb38844500606007cd7389f381a2903c79370438614

Aliases

arxiv: 2301.07972 · arxiv_version: 2301.07972v1 · doi: 10.48550/arxiv.2301.07972 · pith_short_12: BKQF2LF3YOZE · pith_short_16: BKQF2LF3YOZEXCAK · pith_short_8: BKQF2LF3

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/BKQF2LF3YOZEXCAKFSZYQRCQAY \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 0aa05d2cbbc3b24b880a2cb38844500606007cd7389f381a2903c79370438614

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "855136373e55b45722b85a62f6e2bdc79107dede99d95247f01265cf09ebd5c3",
    "cross_cats_sorted": [],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.SE",
    "submitted_at": "2023-01-19T09:58:49Z",
    "title_canon_sha256": "655de535136f0ef4307098db75ad9d17eff95ff9cb3a9d02af3c4f4d2be15d4c"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2301.07972",
    "kind": "arxiv",
    "version": 1
  }
}