Pith Number

pith:HESR5FV3

pith:2025:HESR5FV3BPUVGFOHPWPM4NKN4T

not attested not anchored not stored refs pending

An Empirical Study of Vulnerabilities in Python Packages and Their Detection

Haowei Quan, Junjie Wang, Terry Yue Zhuo, Xiao Chen, Xiaoning Du, Xinzhe Li

arxiv:2509.04260 v1 · 2025-09-04 · cs.SE · cs.AI · cs.CR

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{HESR5FV3BPUVGFOHPWPM4NKN4T}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Receipt and verification

First computed	2026-07-05T12:04:56.446888Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

39251e96bb0be95315c77d9ece354de4c5c4f41481d2f3a077c24c7df43061ed

Aliases

arxiv: 2509.04260 · arxiv_version: 2509.04260v1 · doi: 10.48550/arxiv.2509.04260 · pith_short_12: HESR5FV3BPUV · pith_short_16: HESR5FV3BPUVGFOH · pith_short_8: HESR5FV3

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/HESR5FV3BPUVGFOHPWPM4NKN4T \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 39251e96bb0be95315c77d9ece354de4c5c4f41481d2f3a077c24c7df43061ed

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "1150402407d96fa7a866eec883dd6e8a03bbdab4c0fe04621e2e125224034d6c",
    "cross_cats_sorted": [
      "cs.AI",
      "cs.CR"
    ],
    "license": "http://creativecommons.org/licenses/by-nc-nd/4.0/",
    "primary_cat": "cs.SE",
    "submitted_at": "2025-09-04T14:38:28Z",
    "title_canon_sha256": "1c20754da11433fc4460a3649e4a248c0fdf29396acb121d8f23a071aadd23e3"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2509.04260",
    "kind": "arxiv",
    "version": 1
  }
}