{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:FEKXWNCOBKDKAPOAQJCK7EBEVJ","short_pith_number":"pith:FEKXWNCO","canonical_record":{"source":{"id":"2406.08205","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-06-12T13:38:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b7f902ceeefda50ec3974af5449e5df130b9e10af3aab67aef3e35b9c34cf6bf","abstract_canon_sha256":"abf8366ebda8fd284ecc24cef403411d0d7d278f875bc3ed7b6a411e1ac13bbe"},"schema_version":"1.0"},"canonical_sha256":"29157b344e0a86a03dc08244af9024aa4cc512226224feedbbad634f44d757df","source":{"kind":"arxiv","id":"2406.08205","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.08205","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"arxiv_version","alias_value":"2406.08205v2","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.08205","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_12","alias_value":"FEKXWNCOBKDK","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_16","alias_value":"FEKXWNCOBKDKAPOA","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_8","alias_value":"FEKXWNCO","created_at":"2026-07-05T09:02:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:FEKXWNCOBKDKAPOAQJCK7EBEVJ","target":"record","payload":{"canonical_record":{"source":{"id":"2406.08205","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-06-12T13:38:48Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b7f902ceeefda50ec3974af5449e5df130b9e10af3aab67aef3e35b9c34cf6bf","abstract_canon_sha256":"abf8366ebda8fd284ecc24cef403411d0d7d278f875bc3ed7b6a411e1ac13bbe"},"schema_version":"1.0"},"canonical_sha256":"29157b344e0a86a03dc08244af9024aa4cc512226224feedbbad634f44d757df","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:02:41.298716Z","signature_b64":"ohgU0H8qSzfd4UaU0qscRfiGtyP2uzUSk0VlYsu7cVEgVGq/L9DRx+rEoq1rAljFUHkUL+TRaOExMNiSFzQhCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"29157b344e0a86a03dc08244af9024aa4cc512226224feedbbad634f44d757df","last_reissued_at":"2026-07-05T09:02:41.298123Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:02:41.298123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.08205","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3RSr010Sv/FJ+bw5Lksl0tJ4kQmSpSma2GCw+r4U8i7mr2kbUmBqmIP4DfcRP4zmuxZOKldHoKgEJJCsDJCPCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T01:33:30.205989Z"},"content_sha256":"afb7b503e96ed1752b9d12258010ec4013275b5ced7e545a7672d572b8394c25","schema_version":"1.0","event_id":"sha256:afb7b503e96ed1752b9d12258010ec4013275b5ced7e545a7672d572b8394c25"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:FEKXWNCOBKDKAPOAQJCK7EBEVJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claims","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.SE","authors_text":"George K. Thiruvathukal, James C. Davis, Jason Jones, Nicholas Synovic, Wenxin Jiang","submitted_at":"2024-06-12T13:38:48Z","abstract_excerpt":"Background: Collaborative Software Package Registries (SPRs) are an integral part of the software supply chain. Much engineering work synthesizes SPR package into applications. Prior research has examined SPRs for traditional software, such as NPM (JavaScript) and PyPI (Python). Pre-Trained Model (PTM) Registries are an emerging class of SPR of increasing importance, because they support the deep learning supply chain.\n  Aims: Recent empirical research has examined PTM registries in ways such as vulnerabilities, reuse processes, and evolution. However, no existing research synthesizes them to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.08205","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.08205/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:02:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Djaeyp+/SgRzSLr7xYBmOAIQ4MfGIVys7gmkmN8C4bfvPFoGpbNfl6kpa4EExcdEnGX20WY2qs/YVbmAzfWEDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T01:33:30.206378Z"},"content_sha256":"7983db2b645bfad054dd9e08bbaf71ed52b66258d24ebbee626716076a8bedb3","schema_version":"1.0","event_id":"sha256:7983db2b645bfad054dd9e08bbaf71ed52b66258d24ebbee626716076a8bedb3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/bundle.json","state_url":"https://pith.science/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T01:33:30Z","links":{"resolver":"https://pith.science/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ","bundle":"https://pith.science/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/bundle.json","state":"https://pith.science/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FEKXWNCOBKDKAPOAQJCK7EBEVJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:FEKXWNCOBKDKAPOAQJCK7EBEVJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"abf8366ebda8fd284ecc24cef403411d0d7d278f875bc3ed7b6a411e1ac13bbe","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-06-12T13:38:48Z","title_canon_sha256":"b7f902ceeefda50ec3974af5449e5df130b9e10af3aab67aef3e35b9c34cf6bf"},"schema_version":"1.0","source":{"id":"2406.08205","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.08205","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"arxiv_version","alias_value":"2406.08205v2","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.08205","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_12","alias_value":"FEKXWNCOBKDK","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_16","alias_value":"FEKXWNCOBKDKAPOA","created_at":"2026-07-05T09:02:41Z"},{"alias_kind":"pith_short_8","alias_value":"FEKXWNCO","created_at":"2026-07-05T09:02:41Z"}],"graph_snapshots":[{"event_id":"sha256:7983db2b645bfad054dd9e08bbaf71ed52b66258d24ebbee626716076a8bedb3","target":"graph","created_at":"2026-07-05T09:02:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.08205/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Background: Collaborative Software Package Registries (SPRs) are an integral part of the software supply chain. Much engineering work synthesizes SPR package into applications. Prior research has examined SPRs for traditional software, such as NPM (JavaScript) and PyPI (Python). Pre-Trained Model (PTM) Registries are an emerging class of SPR of increasing importance, because they support the deep learning supply chain.\n  Aims: Recent empirical research has examined PTM registries in ways such as vulnerabilities, reuse processes, and evolution. However, no existing research synthesizes them to ","authors_text":"George K. Thiruvathukal, James C. Davis, Jason Jones, Nicholas Synovic, Wenxin Jiang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-06-12T13:38:48Z","title":"What do we know about Hugging Face? A systematic literature review and quantitative validation of qualitative claims"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.08205","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:afb7b503e96ed1752b9d12258010ec4013275b5ced7e545a7672d572b8394c25","target":"record","created_at":"2026-07-05T09:02:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"abf8366ebda8fd284ecc24cef403411d0d7d278f875bc3ed7b6a411e1ac13bbe","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-06-12T13:38:48Z","title_canon_sha256":"b7f902ceeefda50ec3974af5449e5df130b9e10af3aab67aef3e35b9c34cf6bf"},"schema_version":"1.0","source":{"id":"2406.08205","kind":"arxiv","version":2}},"canonical_sha256":"29157b344e0a86a03dc08244af9024aa4cc512226224feedbbad634f44d757df","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"29157b344e0a86a03dc08244af9024aa4cc512226224feedbbad634f44d757df","first_computed_at":"2026-07-05T09:02:41.298123Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:02:41.298123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ohgU0H8qSzfd4UaU0qscRfiGtyP2uzUSk0VlYsu7cVEgVGq/L9DRx+rEoq1rAljFUHkUL+TRaOExMNiSFzQhCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:02:41.298716Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.08205","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:afb7b503e96ed1752b9d12258010ec4013275b5ced7e545a7672d572b8394c25","sha256:7983db2b645bfad054dd9e08bbaf71ed52b66258d24ebbee626716076a8bedb3"],"state_sha256":"0c6e2951fef2d80b31f0dc1c0928d1ba5a21718aff4c1c2b71fa2bab4812da41"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C5vTq0p1yzXrn2jeNITqrCGLlzVFXVkEQQvfcPnn8J4snblKPwxoCaR9x9C9aAwdzRriElIMOMAZMQHklYO4Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T01:33:30.208461Z","bundle_sha256":"aab719c2593ac09d10f70deb07343f8e5e300a74b286e3a8604b62b9b6a6ba46"}}