{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:HPAS7X2KV5LYCECVNU5HCKR343","short_pith_number":"pith:HPAS7X2K","canonical_record":{"source":{"id":"2607.15315","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-15T23:02:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"443884e4d9ee4202533ecd81bf3e35ff712b98209f06c04569d934bf73614efb","abstract_canon_sha256":"07c370be04a8c3925121eba8daf1746c98ef19865bd936e6e60d723ba2e9b37f"},"schema_version":"1.0"},"canonical_sha256":"3bc12fdf4aaf578110556d3a712a3be6e076659907c04f5eb68680b8b0bc3867","source":{"kind":"arxiv","id":"2607.15315","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15315","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15315v1","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15315","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"HPAS7X2KV5LY","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"HPAS7X2KV5LYCECV","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"HPAS7X2K","created_at":"2026-07-20T00:18:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:HPAS7X2KV5LYCECVNU5HCKR343","target":"record","payload":{"canonical_record":{"source":{"id":"2607.15315","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-15T23:02:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"443884e4d9ee4202533ecd81bf3e35ff712b98209f06c04569d934bf73614efb","abstract_canon_sha256":"07c370be04a8c3925121eba8daf1746c98ef19865bd936e6e60d723ba2e9b37f"},"schema_version":"1.0"},"canonical_sha256":"3bc12fdf4aaf578110556d3a712a3be6e076659907c04f5eb68680b8b0bc3867","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-20T00:18:26.519038Z","signature_b64":"1O7wB05HS0d6Jj3hLhYh6Q+lIOh6YjMOkcxewfcb33FN1bu2bTOpHfNcOIIA3kgOn06PxWNEjCkyBmJ/11pEAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3bc12fdf4aaf578110556d3a712a3be6e076659907c04f5eb68680b8b0bc3867","last_reissued_at":"2026-07-20T00:18:26.518268Z","signature_status":"signed_v1","first_computed_at":"2026-07-20T00:18:26.518268Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.15315","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T00:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZnQRddzYYM5Tmm426RYpktgJv1AtzrmCllW6/T19fCebqkpq0smV6YUfBzZFgU9HB3wDANIP8ZfcCubIOJhbCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T14:14:12.420016Z"},"content_sha256":"e8f2f7885d42c04710f8a6bfe538d949e9924862bb07fcc91a0b9a890c1161dc","schema_version":"1.0","event_id":"sha256:e8f2f7885d42c04710f8a6bfe538d949e9924862bb07fcc91a0b9a890c1161dc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:HPAS7X2KV5LYCECVNU5HCKR343","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Imranur Rahman, Jill Marley, Laurie Williams, Ranindya Paramitha","submitted_at":"2026-07-15T23:02:20Z","abstract_excerpt":"Dependency resolution at a specified point in time in the past can provide insight into software evolution in software ecosystems and facilitate the design of dynamic metrics (e.g., dependency freshness, dependency update rhythm). However, dependency resolution at specified points in time is not possible in major software ecosystems due to a lack of support from package management tools. The goal of this paper is to aid practitioners and researchers in analyzing the state of the ecosystem dependency graph at release points using an enriched dataset with dependency resolution at release points "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15315","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.15315/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T00:18:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EeB+WsCZZ42FN3V/C0jka8uiaO94lmlAjEZyzie/YuH+qZLyomwAQ8qnrxQwstVYmQTV8cwneXJhVfqDiAUzCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T14:14:12.420538Z"},"content_sha256":"6bcfef9fb518654c99cac3c8bea8c1eb5eb3b7707d05365469a863ccb5b3d9e1","schema_version":"1.0","event_id":"sha256:6bcfef9fb518654c99cac3c8bea8c1eb5eb3b7707d05365469a863ccb5b3d9e1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HPAS7X2KV5LYCECVNU5HCKR343/bundle.json","state_url":"https://pith.science/pith/HPAS7X2KV5LYCECVNU5HCKR343/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HPAS7X2KV5LYCECVNU5HCKR343/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T14:14:12Z","links":{"resolver":"https://pith.science/pith/HPAS7X2KV5LYCECVNU5HCKR343","bundle":"https://pith.science/pith/HPAS7X2KV5LYCECVNU5HCKR343/bundle.json","state":"https://pith.science/pith/HPAS7X2KV5LYCECVNU5HCKR343/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HPAS7X2KV5LYCECVNU5HCKR343/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:HPAS7X2KV5LYCECVNU5HCKR343","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"07c370be04a8c3925121eba8daf1746c98ef19865bd936e6e60d723ba2e9b37f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-15T23:02:20Z","title_canon_sha256":"443884e4d9ee4202533ecd81bf3e35ff712b98209f06c04569d934bf73614efb"},"schema_version":"1.0","source":{"id":"2607.15315","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15315","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15315v1","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15315","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_12","alias_value":"HPAS7X2KV5LY","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_16","alias_value":"HPAS7X2KV5LYCECV","created_at":"2026-07-20T00:18:26Z"},{"alias_kind":"pith_short_8","alias_value":"HPAS7X2K","created_at":"2026-07-20T00:18:26Z"}],"graph_snapshots":[{"event_id":"sha256:6bcfef9fb518654c99cac3c8bea8c1eb5eb3b7707d05365469a863ccb5b3d9e1","target":"graph","created_at":"2026-07-20T00:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.15315/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Dependency resolution at a specified point in time in the past can provide insight into software evolution in software ecosystems and facilitate the design of dynamic metrics (e.g., dependency freshness, dependency update rhythm). However, dependency resolution at specified points in time is not possible in major software ecosystems due to a lack of support from package management tools. The goal of this paper is to aid practitioners and researchers in analyzing the state of the ecosystem dependency graph at release points using an enriched dataset with dependency resolution at release points ","authors_text":"Imranur Rahman, Jill Marley, Laurie Williams, Ranindya Paramitha","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-15T23:02:20Z","title":"CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15315","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e8f2f7885d42c04710f8a6bfe538d949e9924862bb07fcc91a0b9a890c1161dc","target":"record","created_at":"2026-07-20T00:18:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"07c370be04a8c3925121eba8daf1746c98ef19865bd936e6e60d723ba2e9b37f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2026-07-15T23:02:20Z","title_canon_sha256":"443884e4d9ee4202533ecd81bf3e35ff712b98209f06c04569d934bf73614efb"},"schema_version":"1.0","source":{"id":"2607.15315","kind":"arxiv","version":1}},"canonical_sha256":"3bc12fdf4aaf578110556d3a712a3be6e076659907c04f5eb68680b8b0bc3867","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3bc12fdf4aaf578110556d3a712a3be6e076659907c04f5eb68680b8b0bc3867","first_computed_at":"2026-07-20T00:18:26.518268Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-20T00:18:26.518268Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1O7wB05HS0d6Jj3hLhYh6Q+lIOh6YjMOkcxewfcb33FN1bu2bTOpHfNcOIIA3kgOn06PxWNEjCkyBmJ/11pEAw==","signature_status":"signed_v1","signed_at":"2026-07-20T00:18:26.519038Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.15315","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e8f2f7885d42c04710f8a6bfe538d949e9924862bb07fcc91a0b9a890c1161dc","sha256:6bcfef9fb518654c99cac3c8bea8c1eb5eb3b7707d05365469a863ccb5b3d9e1"],"state_sha256":"4d3e9fc18402daf7cdc892c413f0281a7b50549083fc0c22c70ed2d0e68738e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sMCm7MFCAPrNMOn6SHAL/i6MYJZiRCAN5AWJ8En1fe48Ilnb2SbOuWWaAWRoeICvIFGsyKAWKasuR6OZABZODA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T14:14:12.428178Z","bundle_sha256":"487fab76bcee0557b14a7c6a51fddf69517137a44c02698b6ffe5558fabfbe5a"}}