{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IJL53M7FMQMKWRNMYXGD27VAHA","short_pith_number":"pith:IJL53M7F","canonical_record":{"source":{"id":"2412.05887","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T10:48:30Z","cross_cats_sorted":["cs.CY","cs.SE"],"title_canon_sha256":"cb4329e7e31f1e8ea0e82ede102f6391d2c46647a6887c4fca055ecfc458e0c8","abstract_canon_sha256":"df62ac96d05ad149ac7801bb9447ade039f274226ce7f1625db00ab34e1bff9b"},"schema_version":"1.0"},"canonical_sha256":"4257ddb3e56418ab45acc5cc3d7ea0381b60cc701a3392d6b7c345ff955f8892","source":{"kind":"arxiv","id":"2412.05887","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.05887","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"arxiv_version","alias_value":"2412.05887v3","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.05887","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_12","alias_value":"IJL53M7FMQMK","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_16","alias_value":"IJL53M7FMQMKWRNM","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_8","alias_value":"IJL53M7F","created_at":"2026-05-20T00:00:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IJL53M7FMQMKWRNMYXGD27VAHA","target":"record","payload":{"canonical_record":{"source":{"id":"2412.05887","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T10:48:30Z","cross_cats_sorted":["cs.CY","cs.SE"],"title_canon_sha256":"cb4329e7e31f1e8ea0e82ede102f6391d2c46647a6887c4fca055ecfc458e0c8","abstract_canon_sha256":"df62ac96d05ad149ac7801bb9447ade039f274226ce7f1625db00ab34e1bff9b"},"schema_version":"1.0"},"canonical_sha256":"4257ddb3e56418ab45acc5cc3d7ea0381b60cc701a3392d6b7c345ff955f8892","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-20T00:00:16.957642Z","signature_b64":"6S06T9Gka4soH2yBs+FoW2Q+5w2/fLE8gObg/51Gy66qlWCw8mjAIYXmJ5NzJDK5F0xIY9m74Av/XAa9+gRmDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4257ddb3e56418ab45acc5cc3d7ea0381b60cc701a3392d6b7c345ff955f8892","last_reissued_at":"2026-05-20T00:00:16.956832Z","signature_status":"signed_v1","first_computed_at":"2026-05-20T00:00:16.956832Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.05887","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:00:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w8saDeyNHNUkVuc1mJrJKpga/gDIf2zoL8d6R4aoXUSShmJwqzLIFlKfAKhEdCCQWMttOGKvepCWevWSpbqLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T01:09:43.349739Z"},"content_sha256":"870971b51a90947b755169076739e5f5941ad49d0a4d34ba06500a822d656fb6","schema_version":"1.0","event_id":"sha256:870971b51a90947b755169076739e5f5941ad49d0a4d34ba06500a822d656fb6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IJL53M7FMQMKWRNMYXGD27VAHA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Overview of Cyber Security Funding for Open Source Software","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CY","cs.SE"],"primary_cat":"cs.CR","authors_text":"Adam Alami, Gaurav Choudhary, Jukka Ruohonen","submitted_at":"2024-12-08T10:48:30Z","abstract_excerpt":"Many open source software (OSS) projects need more human resources for maintenance, improvements, and sometimes even their survival. These needs allegedly apply even to vital OSS projects that can be seen as being a part of the world's critical infrastructures. To address this resourcing problem, new funding instruments for OSS projects have been established in recent years. The paper examines two such funding bodies for OSS and the projects they have funded. The focus of both funding bodies is on software security and cyber security in general. Based on qualitative thematic analysis, the resu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.05887","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.05887/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:00:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9D1t7e1wsSH11vVnLZ58U//alDcdqVPbw3Lslxp8iGDy+P1O1wJopfsq5CVnINohvSQMzWQ5WvLOICky1LuQAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T01:09:43.350478Z"},"content_sha256":"a6516df9dc5259564de242208c6bd4eab4329da9b98dc294b6690d9add7e287d","schema_version":"1.0","event_id":"sha256:a6516df9dc5259564de242208c6bd4eab4329da9b98dc294b6690d9add7e287d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IJL53M7FMQMKWRNMYXGD27VAHA/bundle.json","state_url":"https://pith.science/pith/IJL53M7FMQMKWRNMYXGD27VAHA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IJL53M7FMQMKWRNMYXGD27VAHA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-08T01:09:43Z","links":{"resolver":"https://pith.science/pith/IJL53M7FMQMKWRNMYXGD27VAHA","bundle":"https://pith.science/pith/IJL53M7FMQMKWRNMYXGD27VAHA/bundle.json","state":"https://pith.science/pith/IJL53M7FMQMKWRNMYXGD27VAHA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IJL53M7FMQMKWRNMYXGD27VAHA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IJL53M7FMQMKWRNMYXGD27VAHA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df62ac96d05ad149ac7801bb9447ade039f274226ce7f1625db00ab34e1bff9b","cross_cats_sorted":["cs.CY","cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T10:48:30Z","title_canon_sha256":"cb4329e7e31f1e8ea0e82ede102f6391d2c46647a6887c4fca055ecfc458e0c8"},"schema_version":"1.0","source":{"id":"2412.05887","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.05887","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"arxiv_version","alias_value":"2412.05887v3","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.05887","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_12","alias_value":"IJL53M7FMQMK","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_16","alias_value":"IJL53M7FMQMKWRNM","created_at":"2026-05-20T00:00:16Z"},{"alias_kind":"pith_short_8","alias_value":"IJL53M7F","created_at":"2026-05-20T00:00:16Z"}],"graph_snapshots":[{"event_id":"sha256:a6516df9dc5259564de242208c6bd4eab4329da9b98dc294b6690d9add7e287d","target":"graph","created_at":"2026-05-20T00:00:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.05887/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many open source software (OSS) projects need more human resources for maintenance, improvements, and sometimes even their survival. These needs allegedly apply even to vital OSS projects that can be seen as being a part of the world's critical infrastructures. To address this resourcing problem, new funding instruments for OSS projects have been established in recent years. The paper examines two such funding bodies for OSS and the projects they have funded. The focus of both funding bodies is on software security and cyber security in general. Based on qualitative thematic analysis, the resu","authors_text":"Adam Alami, Gaurav Choudhary, Jukka Ruohonen","cross_cats":["cs.CY","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T10:48:30Z","title":"An Overview of Cyber Security Funding for Open Source Software"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.05887","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:870971b51a90947b755169076739e5f5941ad49d0a4d34ba06500a822d656fb6","target":"record","created_at":"2026-05-20T00:00:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df62ac96d05ad149ac7801bb9447ade039f274226ce7f1625db00ab34e1bff9b","cross_cats_sorted":["cs.CY","cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T10:48:30Z","title_canon_sha256":"cb4329e7e31f1e8ea0e82ede102f6391d2c46647a6887c4fca055ecfc458e0c8"},"schema_version":"1.0","source":{"id":"2412.05887","kind":"arxiv","version":3}},"canonical_sha256":"4257ddb3e56418ab45acc5cc3d7ea0381b60cc701a3392d6b7c345ff955f8892","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4257ddb3e56418ab45acc5cc3d7ea0381b60cc701a3392d6b7c345ff955f8892","first_computed_at":"2026-05-20T00:00:16.956832Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-20T00:00:16.956832Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6S06T9Gka4soH2yBs+FoW2Q+5w2/fLE8gObg/51Gy66qlWCw8mjAIYXmJ5NzJDK5F0xIY9m74Av/XAa9+gRmDA==","signature_status":"signed_v1","signed_at":"2026-05-20T00:00:16.957642Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.05887","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:870971b51a90947b755169076739e5f5941ad49d0a4d34ba06500a822d656fb6","sha256:a6516df9dc5259564de242208c6bd4eab4329da9b98dc294b6690d9add7e287d"],"state_sha256":"ff2ba60ffbcfb0bca5bf84b07d3e0daa142a76390dbb11422da98e7ecbbc75f9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9eLhveGFbtmTWsF348n2HXcYiY1Kd9+N224ouGdTApixBVSKKR+6kK8TrB7wpkXzfBIXYFbzmTEQX0YHYdA1Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-08T01:09:43.353855Z","bundle_sha256":"38ed6156d262249f559d6db4b1ac37fb0bff1eb4df7f2ae518f7cfa7440aa069"}}