Pith Number

pith:DAV77CEY

pith:2022:DAV77CEYCBYZ3JIVSZTZPY6GYX

not attested not anchored not stored refs pending

Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem

Bihuan Chen, Chengwei Liu, Lingling Fan, Sen Chen, Xin Peng, Yang Liu

arxiv:2201.03981 v2 · 2022-01-11 · cs.SE

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{DAV77CEYCBYZ3JIVSZTZPY6GYX}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Receipt and verification

First computed	2026-07-05T04:51:54.456592Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

182bff889810719da515966797e3c6c5c7eccef67a48ffc2ee063fe608725291

Aliases

arxiv: 2201.03981 · arxiv_version: 2201.03981v2 · doi: 10.48550/arxiv.2201.03981 · pith_short_12: DAV77CEYCBYZ · pith_short_16: DAV77CEYCBYZ3JIV · pith_short_8: DAV77CEY

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/DAV77CEYCBYZ3JIVSZTZPY6GYX \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 182bff889810719da515966797e3c6c5c7eccef67a48ffc2ee063fe608725291

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "41547aae72a446cef54e8a8882317be81c2072d01f2b0c4d7cd114f24da5b2dc",
    "cross_cats_sorted": [],
    "license": "http://arxiv.org/licenses/nonexclusive-distrib/1.0/",
    "primary_cat": "cs.SE",
    "submitted_at": "2022-01-11T14:51:46Z",
    "title_canon_sha256": "7335614120b130b862f4121d2d5b3cee9a031d399632723933ae6c90e23d6c30"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2201.03981",
    "kind": "arxiv",
    "version": 2
  }
}