Pith Number

pith:C5LBB2M2

pith:2021:C5LBB2M2TF3NF62YYUF5URESG3

not attested not anchored not stored refs pending

What are Weak Links in the npm Supply Chain?

Brendan Murphy, Chandra Maddila, Laurie Williams, Nusrat Zahan, Patrice Godefroid, Thomas Zimmermann

arxiv:2112.10165 v2 · 2021-12-19 · cs.CR · cs.CY · cs.SE

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{C5LBB2M2TF3NF62YYUF5URESG3}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

1 paper in Pith

Analyzing the Availability of E-Mail Addresses for PyPI Libraries

Receipt and verification

First computed	2026-07-05T03:56:33.039485Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

175610e99a9976d2fb58c50bda449236dc61a678adde922bf2636dc6016154d5

Aliases

arxiv: 2112.10165 · arxiv_version: 2112.10165v2 · doi: 10.48550/arxiv.2112.10165 · pith_short_12: C5LBB2M2TF3N · pith_short_16: C5LBB2M2TF3NF62Y · pith_short_8: C5LBB2M2

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/C5LBB2M2TF3NF62YYUF5URESG3 \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 175610e99a9976d2fb58c50bda449236dc61a678adde922bf2636dc6016154d5

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "dee2a41e8e3668b9b77425a3ae2d42ace6353bbcc418d371ace80b51befd8cda",
    "cross_cats_sorted": [
      "cs.CY",
      "cs.SE"
    ],
    "license": "http://arxiv.org/licenses/nonexclusive-distrib/1.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2021-12-19T15:06:31Z",
    "title_canon_sha256": "d3609c3c3e4981ae567e9ed130f7a2ba0cf3c59583228b9741175081dddbaf40"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2112.10165",
    "kind": "arxiv",
    "version": 2
  }
}