{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:E5XWRK27HRMS4DFQMLQHG4EPPQ","short_pith_number":"pith:E5XWRK27","canonical_record":{"source":{"id":"2504.19551","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-28T07:57:42Z","cross_cats_sorted":[],"title_canon_sha256":"5e52c7f328b5eedb345c0a58bbcd4e6e73fe41e1d5dc3fafc41002ba1c6aaeb6","abstract_canon_sha256":"184a7e2fdebfe78bbae4ee73b6006f77fef420cd32143aa8922b5b5ed675144e"},"schema_version":"1.0"},"canonical_sha256":"276f68ab5f3c592e0cb062e073708f7c173318ca488da5057896d0523432c514","source":{"kind":"arxiv","id":"2504.19551","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.19551","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.19551v1","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.19551","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_12","alias_value":"E5XWRK27HRMS","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_16","alias_value":"E5XWRK27HRMS4DFQ","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_8","alias_value":"E5XWRK27","created_at":"2026-07-05T10:54:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:E5XWRK27HRMS4DFQMLQHG4EPPQ","target":"record","payload":{"canonical_record":{"source":{"id":"2504.19551","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-28T07:57:42Z","cross_cats_sorted":[],"title_canon_sha256":"5e52c7f328b5eedb345c0a58bbcd4e6e73fe41e1d5dc3fafc41002ba1c6aaeb6","abstract_canon_sha256":"184a7e2fdebfe78bbae4ee73b6006f77fef420cd32143aa8922b5b5ed675144e"},"schema_version":"1.0"},"canonical_sha256":"276f68ab5f3c592e0cb062e073708f7c173318ca488da5057896d0523432c514","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:54:59.505857Z","signature_b64":"2S5WqeVvYetGmkXzgmHmbqQcPqLAmzYMUA6PXeZ8GwFpIJXHkNkVzMngNJMuBYbDVkg7qsz/pxspAMT6k5m4Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"276f68ab5f3c592e0cb062e073708f7c173318ca488da5057896d0523432c514","last_reissued_at":"2026-07-05T10:54:59.505371Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:54:59.505371Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.19551","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EvodlleOCXFTaHfl3c/eBd0mNSU0DOFCbE6gmqH8cvg8I5+ZrIWDI4xYx8a1P0dtWyKK0AztSPMi6DUL1q3DCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T08:55:26.808060Z"},"content_sha256":"146a539a3ccbcbdf73ba218bf941e7591087faeb6acf09b5303bda1ee0785d77","schema_version":"1.0","event_id":"sha256:146a539a3ccbcbdf73ba218bf941e7591087faeb6acf09b5303bda1ee0785d77"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:E5XWRK27HRMS4DFQMLQHG4EPPQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BinCoFer: Three-Stage Purification for Effective C/C++ Binary Third-Party Library Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Cai Fu, Guanghao Zhao, Shuhao Shen, Yayi Zou, Yixiang Zhang, Yueming Wu","submitted_at":"2025-04-28T07:57:42Z","abstract_excerpt":"Third-party libraries (TPL) are becoming increasingly popular to achieve efficient and concise software development. However, unregulated use of TPL will introduce legal and security issues in software development. Consequently, some studies have attempted to detect the reuse of TPLs in target programs by constructing a feature repository. Most of the works require access to the source code of TPLs, while the others suffer from redundancy in the repository, low detection efficiency, and difficulties in detecting partially referenced third-party libraries. Therefore, we introduce BinCoFer, a to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.19551","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.19551/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:54:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"45ZqJ3MdgHgPARalG0AepRlHLwmy3hbQby1T4h/TQSxUr+C+kyhRMPZ08tKuNYYEoSbJ4kAPFyY5P23SsfuxCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T08:55:26.808578Z"},"content_sha256":"5f0850d409e2b0a7e7176e662a3021ca7bbf5eb4834f25273068e168d89738aa","schema_version":"1.0","event_id":"sha256:5f0850d409e2b0a7e7176e662a3021ca7bbf5eb4834f25273068e168d89738aa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/bundle.json","state_url":"https://pith.science/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T08:55:26Z","links":{"resolver":"https://pith.science/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ","bundle":"https://pith.science/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/bundle.json","state":"https://pith.science/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E5XWRK27HRMS4DFQMLQHG4EPPQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:E5XWRK27HRMS4DFQMLQHG4EPPQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"184a7e2fdebfe78bbae4ee73b6006f77fef420cd32143aa8922b5b5ed675144e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-28T07:57:42Z","title_canon_sha256":"5e52c7f328b5eedb345c0a58bbcd4e6e73fe41e1d5dc3fafc41002ba1c6aaeb6"},"schema_version":"1.0","source":{"id":"2504.19551","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.19551","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.19551v1","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.19551","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_12","alias_value":"E5XWRK27HRMS","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_16","alias_value":"E5XWRK27HRMS4DFQ","created_at":"2026-07-05T10:54:59Z"},{"alias_kind":"pith_short_8","alias_value":"E5XWRK27","created_at":"2026-07-05T10:54:59Z"}],"graph_snapshots":[{"event_id":"sha256:5f0850d409e2b0a7e7176e662a3021ca7bbf5eb4834f25273068e168d89738aa","target":"graph","created_at":"2026-07-05T10:54:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.19551/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Third-party libraries (TPL) are becoming increasingly popular to achieve efficient and concise software development. However, unregulated use of TPL will introduce legal and security issues in software development. Consequently, some studies have attempted to detect the reuse of TPLs in target programs by constructing a feature repository. Most of the works require access to the source code of TPLs, while the others suffer from redundancy in the repository, low detection efficiency, and difficulties in detecting partially referenced third-party libraries. Therefore, we introduce BinCoFer, a to","authors_text":"Cai Fu, Guanghao Zhao, Shuhao Shen, Yayi Zou, Yixiang Zhang, Yueming Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-28T07:57:42Z","title":"BinCoFer: Three-Stage Purification for Effective C/C++ Binary Third-Party Library Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.19551","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:146a539a3ccbcbdf73ba218bf941e7591087faeb6acf09b5303bda1ee0785d77","target":"record","created_at":"2026-07-05T10:54:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"184a7e2fdebfe78bbae4ee73b6006f77fef420cd32143aa8922b5b5ed675144e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-28T07:57:42Z","title_canon_sha256":"5e52c7f328b5eedb345c0a58bbcd4e6e73fe41e1d5dc3fafc41002ba1c6aaeb6"},"schema_version":"1.0","source":{"id":"2504.19551","kind":"arxiv","version":1}},"canonical_sha256":"276f68ab5f3c592e0cb062e073708f7c173318ca488da5057896d0523432c514","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"276f68ab5f3c592e0cb062e073708f7c173318ca488da5057896d0523432c514","first_computed_at":"2026-07-05T10:54:59.505371Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:54:59.505371Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2S5WqeVvYetGmkXzgmHmbqQcPqLAmzYMUA6PXeZ8GwFpIJXHkNkVzMngNJMuBYbDVkg7qsz/pxspAMT6k5m4Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:54:59.505857Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.19551","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:146a539a3ccbcbdf73ba218bf941e7591087faeb6acf09b5303bda1ee0785d77","sha256:5f0850d409e2b0a7e7176e662a3021ca7bbf5eb4834f25273068e168d89738aa"],"state_sha256":"2382a877498a9fb08c8ebc61103e6f1ecadcd00014afaef915d71cc4d64edf13"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q/02gIGBuJhFAi9eY5vzoqDhOWjjSljhnxsfz4IOFV8IhqdoAqXuOEsi0ksTit7EJi/PpghRxHLAlJc+8LYLBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T08:55:26.811345Z","bundle_sha256":"4dfbd702ab156dd63372db7a4d3f6c597720f3e3309d2bc00001ef25710a9395"}}