Pith Number

pith:HETFDC6R

pith:2024:HETFDC6RDK7AQGZBP3ACDYFGBT

not attested not anchored not stored refs pending

A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)

Christopher Enoch, Derek Garcia, Henry Lu, Kevin Laporte, Matthew Morrison, Mehdi Mirakhorli, Schuyler Dillon, Viktoria Koscinski

arxiv:2402.11151 v1 · 2024-02-17 · cs.SE

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{HETFDC6RDK7AQGZBP3ACDYFGBT}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

5 papers in Pith

AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems

What You See Is Not What You Execute: Memory-Based Runtime SBOM Generation for Supply Chain Security

StarCoder 2 and The Stack v2: The Next Generation

Hidden Dependencies and Component Variants in SBOM-Based Software Composition Analysis

Receipt and verification

First computed	2026-07-05T07:46:34.902096Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

3926518bd11abe081b217ec021e0a60cd95df9989da7791893bb6cdcf8c52e3e

Aliases

arxiv: 2402.11151 · arxiv_version: 2402.11151v1 · doi: 10.48550/arxiv.2402.11151 · pith_short_12: HETFDC6RDK7A · pith_short_16: HETFDC6RDK7AQGZB · pith_short_8: HETFDC6R

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/HETFDC6RDK7AQGZBP3ACDYFGBT \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 3926518bd11abe081b217ec021e0a60cd95df9989da7791893bb6cdcf8c52e3e

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "0a684c3117819604b9329c76410fb939f6e1f9e00e1c13c521e1b5c59d73f39d",
    "cross_cats_sorted": [],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.SE",
    "submitted_at": "2024-02-17T00:36:20Z",
    "title_canon_sha256": "fa47c6d6c2fd8c6d2830ac7e05a40e474d058d68456e9814d53e7e039aee3262"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2402.11151",
    "kind": "arxiv",
    "version": 1
  }
}