{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:FCDUKAWZR4XKNQWQA3LKTALHU2","short_pith_number":"pith:FCDUKAWZ","canonical_record":{"source":{"id":"2207.04933","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-07-08T06:27:41Z","cross_cats_sorted":[],"title_canon_sha256":"f6b03edb142efe6ae248936caff7dd77910ff2064bfdaeca17e1884c8bf7ddc2","abstract_canon_sha256":"3a8f4a00b397b6afa08dfbf7ebce4bb2cecc3b3f648cc1ddb3828aa80d6b4ed4"},"schema_version":"1.0"},"canonical_sha256":"28874502d98f2ea6c2d006d6a98167a6bcae4f282c69bf3b2bb3e3cfedb26e66","source":{"kind":"arxiv","id":"2207.04933","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.04933","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"arxiv_version","alias_value":"2207.04933v1","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.04933","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_12","alias_value":"FCDUKAWZR4XK","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_16","alias_value":"FCDUKAWZR4XKNQWQ","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_8","alias_value":"FCDUKAWZ","created_at":"2026-07-05T04:39:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:FCDUKAWZR4XKNQWQA3LKTALHU2","target":"record","payload":{"canonical_record":{"source":{"id":"2207.04933","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-07-08T06:27:41Z","cross_cats_sorted":[],"title_canon_sha256":"f6b03edb142efe6ae248936caff7dd77910ff2064bfdaeca17e1884c8bf7ddc2","abstract_canon_sha256":"3a8f4a00b397b6afa08dfbf7ebce4bb2cecc3b3f648cc1ddb3828aa80d6b4ed4"},"schema_version":"1.0"},"canonical_sha256":"28874502d98f2ea6c2d006d6a98167a6bcae4f282c69bf3b2bb3e3cfedb26e66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:39:05.133721Z","signature_b64":"58xmY7T3ufUAST6OxUbPBg56LWU7zsxjop40OWXaMtkqvo4/sF/y7C5Gy4gYM2BR+BF3mfjbm6zGGYM+3Mk7AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"28874502d98f2ea6c2d006d6a98167a6bcae4f282c69bf3b2bb3e3cfedb26e66","last_reissued_at":"2026-07-05T04:39:05.133235Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:39:05.133235Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.04933","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:39:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+BNuH14GAWmIcHhZMQYKjLJ4TXH6/fw5MXZe+QN5H/WqKZQkSSLNOip+ffnH6aTzUwsgz36nxXF6AmoAcOucDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T19:53:56.630742Z"},"content_sha256":"3f1a9c3c47cbe9eaceb145e11b9837d87ae00acb1e864de8f3db099f7edaefd0","schema_version":"1.0","event_id":"sha256:3f1a9c3c47cbe9eaceb145e11b9837d87ae00acb1e864de8f3db099f7edaefd0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:FCDUKAWZR4XKNQWQA3LKTALHU2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding the Role of External Pull Requests in the NPM Ecosystem","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Christoph Treude, Kenichi Matsumoto, Raula Gaikovina Kula, Supatsara Wattanakriengkrai, Vittunyuta Maeprasart","submitted_at":"2022-07-08T06:27:41Z","abstract_excerpt":"The risk to using third-party libraries in a software application is that much needed maintenance is solely carried out by library maintainers. These libraries may rely on a core team of maintainers (who might be a single maintainer that is unpaid and overworked) to serve a massive client user-base. On the other hand, being open source has the benefit of receiving contributions (in the form of External PRs) to help fix bugs and add new features. In this paper, we investigate the role by which External PRs (contributions from outside the core team of maintainers) contribute to a library. Throug"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.04933","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.04933/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:39:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hpOy87C7kDUseX368Ff3QxfkC4qxOfyXI6UaG9uFKW3gA1QYAoUD0XGPEhpJSUU74nCKxA4B5eGtzpoiahqmBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T19:53:56.636557Z"},"content_sha256":"64716da00364ea5e8f378fd0d10b5a8f93cb975650e46438facfcdca8b918e62","schema_version":"1.0","event_id":"sha256:64716da00364ea5e8f378fd0d10b5a8f93cb975650e46438facfcdca8b918e62"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/bundle.json","state_url":"https://pith.science/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T19:53:56Z","links":{"resolver":"https://pith.science/pith/FCDUKAWZR4XKNQWQA3LKTALHU2","bundle":"https://pith.science/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/bundle.json","state":"https://pith.science/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FCDUKAWZR4XKNQWQA3LKTALHU2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:FCDUKAWZR4XKNQWQA3LKTALHU2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3a8f4a00b397b6afa08dfbf7ebce4bb2cecc3b3f648cc1ddb3828aa80d6b4ed4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-07-08T06:27:41Z","title_canon_sha256":"f6b03edb142efe6ae248936caff7dd77910ff2064bfdaeca17e1884c8bf7ddc2"},"schema_version":"1.0","source":{"id":"2207.04933","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.04933","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"arxiv_version","alias_value":"2207.04933v1","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.04933","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_12","alias_value":"FCDUKAWZR4XK","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_16","alias_value":"FCDUKAWZR4XKNQWQ","created_at":"2026-07-05T04:39:05Z"},{"alias_kind":"pith_short_8","alias_value":"FCDUKAWZ","created_at":"2026-07-05T04:39:05Z"}],"graph_snapshots":[{"event_id":"sha256:64716da00364ea5e8f378fd0d10b5a8f93cb975650e46438facfcdca8b918e62","target":"graph","created_at":"2026-07-05T04:39:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.04933/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The risk to using third-party libraries in a software application is that much needed maintenance is solely carried out by library maintainers. These libraries may rely on a core team of maintainers (who might be a single maintainer that is unpaid and overworked) to serve a massive client user-base. On the other hand, being open source has the benefit of receiving contributions (in the form of External PRs) to help fix bugs and add new features. In this paper, we investigate the role by which External PRs (contributions from outside the core team of maintainers) contribute to a library. Throug","authors_text":"Christoph Treude, Kenichi Matsumoto, Raula Gaikovina Kula, Supatsara Wattanakriengkrai, Vittunyuta Maeprasart","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-07-08T06:27:41Z","title":"Understanding the Role of External Pull Requests in the NPM Ecosystem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.04933","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3f1a9c3c47cbe9eaceb145e11b9837d87ae00acb1e864de8f3db099f7edaefd0","target":"record","created_at":"2026-07-05T04:39:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3a8f4a00b397b6afa08dfbf7ebce4bb2cecc3b3f648cc1ddb3828aa80d6b4ed4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-07-08T06:27:41Z","title_canon_sha256":"f6b03edb142efe6ae248936caff7dd77910ff2064bfdaeca17e1884c8bf7ddc2"},"schema_version":"1.0","source":{"id":"2207.04933","kind":"arxiv","version":1}},"canonical_sha256":"28874502d98f2ea6c2d006d6a98167a6bcae4f282c69bf3b2bb3e3cfedb26e66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"28874502d98f2ea6c2d006d6a98167a6bcae4f282c69bf3b2bb3e3cfedb26e66","first_computed_at":"2026-07-05T04:39:05.133235Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:39:05.133235Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"58xmY7T3ufUAST6OxUbPBg56LWU7zsxjop40OWXaMtkqvo4/sF/y7C5Gy4gYM2BR+BF3mfjbm6zGGYM+3Mk7AA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:39:05.133721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.04933","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3f1a9c3c47cbe9eaceb145e11b9837d87ae00acb1e864de8f3db099f7edaefd0","sha256:64716da00364ea5e8f378fd0d10b5a8f93cb975650e46438facfcdca8b918e62"],"state_sha256":"f1abdbd8b4fcf263c851330c5b58061ede4fa45d747258f2b4f0e5a389dd96ac"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aiaTkYpgPhf1qWrjAwljtMCtZLUmGyfv/fb6Gy9o89cOHW2O8q65YcYayahzbZU5Xd9DBt+lA10hwxqzcIrqDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T19:53:56.645169Z","bundle_sha256":"8820cd26da5dc46ea7a254a5c6afb74dd28c6a0806622ad8cf7a99b654d1f18e"}}