{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:IKZFWU32QWM2X5AS5NID6VVCZI","short_pith_number":"pith:IKZFWU32","canonical_record":{"source":{"id":"1710.04936","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-10-13T14:23:36Z","cross_cats_sorted":[],"title_canon_sha256":"23f2b108f1950deb6339f6d33cc549867ebb50741d543ad4e4bc8a4dc56a62d5","abstract_canon_sha256":"5b97a7692c445bf3d3ab76ab50ad5adc2e850401fc76a5d78cec48d8c2737874"},"schema_version":"1.0"},"canonical_sha256":"42b25b537a8599abf412eb503f56a2ca2cd7a3a21eb9e760968ba44090f81da7","source":{"kind":"arxiv","id":"1710.04936","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1710.04936","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"arxiv_version","alias_value":"1710.04936v1","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.04936","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"pith_short_12","alias_value":"IKZFWU32QWM2","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"IKZFWU32QWM2X5AS","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"IKZFWU32","created_at":"2026-05-18T12:31:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:IKZFWU32QWM2X5AS5NID6VVCZI","target":"record","payload":{"canonical_record":{"source":{"id":"1710.04936","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-10-13T14:23:36Z","cross_cats_sorted":[],"title_canon_sha256":"23f2b108f1950deb6339f6d33cc549867ebb50741d543ad4e4bc8a4dc56a62d5","abstract_canon_sha256":"5b97a7692c445bf3d3ab76ab50ad5adc2e850401fc76a5d78cec48d8c2737874"},"schema_version":"1.0"},"canonical_sha256":"42b25b537a8599abf412eb503f56a2ca2cd7a3a21eb9e760968ba44090f81da7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:32:56.270533Z","signature_b64":"fjKXLGCZwKt9HdTmDsDpx7+124hFu4SDLOks29kJzO8suJ3fME/INd1whsuAr9mNB3AKVBKlY2oGABsVwsRjBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"42b25b537a8599abf412eb503f56a2ca2cd7a3a21eb9e760968ba44090f81da7","last_reissued_at":"2026-05-18T00:32:56.269971Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:32:56.269971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1710.04936","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:32:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qZA6RyY+Jo7VNYndAT8bHpS9E4fWVVF11lgY446Ancouom7ei0ZNHOk9F0hPV0xcqmMNRzFucFbDl3vJ8qtuDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T02:41:20.819855Z"},"content_sha256":"9f8cad1641b6d2122ac8d968109027fcffd77e57fee85c817c1cf5026a7765f0","schema_version":"1.0","event_id":"sha256:9f8cad1641b6d2122ac8d968109027fcffd77e57fee85c817c1cf5026a7765f0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:IKZFWU32QWM2X5AS5NID6VVCZI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Empirical Comparison of Dependency Network Evolution in Seven Software Packaging Ecosystems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Alexandre Decan, Philippe Grosjean, Tom Mens","submitted_at":"2017-10-13T14:23:36Z","abstract_excerpt":"Nearly every popular programming language comes with one or more package managers. The software packages distributed by such package managers form large software ecosystems. These packaging ecosystems contain a large number of package releases that are updated regularly and that have many dependencies to other package releases. While packaging ecosystems are extremely useful for their respective communities of developers, they face challenges related to their scale, complexity, and rate of evolution. Typical problems are backward incompatible package updates, and the risk of (transitively) dep"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.04936","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:32:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aT6QvsEWvCnLfmbpxqftiBUXCbvoXN+Vg2NobyqIzGOky+NBqsVRNPs18iXyTh5BF0Z4pe2xFVW+BIMIChzKBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T02:41:20.820191Z"},"content_sha256":"d69941031db5d8747aab95b3e8bfaabcb4905777acc188b171be35eaa0b0af69","schema_version":"1.0","event_id":"sha256:d69941031db5d8747aab95b3e8bfaabcb4905777acc188b171be35eaa0b0af69"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IKZFWU32QWM2X5AS5NID6VVCZI/bundle.json","state_url":"https://pith.science/pith/IKZFWU32QWM2X5AS5NID6VVCZI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IKZFWU32QWM2X5AS5NID6VVCZI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-03T02:41:20Z","links":{"resolver":"https://pith.science/pith/IKZFWU32QWM2X5AS5NID6VVCZI","bundle":"https://pith.science/pith/IKZFWU32QWM2X5AS5NID6VVCZI/bundle.json","state":"https://pith.science/pith/IKZFWU32QWM2X5AS5NID6VVCZI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IKZFWU32QWM2X5AS5NID6VVCZI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:IKZFWU32QWM2X5AS5NID6VVCZI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5b97a7692c445bf3d3ab76ab50ad5adc2e850401fc76a5d78cec48d8c2737874","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-10-13T14:23:36Z","title_canon_sha256":"23f2b108f1950deb6339f6d33cc549867ebb50741d543ad4e4bc8a4dc56a62d5"},"schema_version":"1.0","source":{"id":"1710.04936","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1710.04936","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"arxiv_version","alias_value":"1710.04936v1","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.04936","created_at":"2026-05-18T00:32:56Z"},{"alias_kind":"pith_short_12","alias_value":"IKZFWU32QWM2","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"IKZFWU32QWM2X5AS","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"IKZFWU32","created_at":"2026-05-18T12:31:21Z"}],"graph_snapshots":[{"event_id":"sha256:d69941031db5d8747aab95b3e8bfaabcb4905777acc188b171be35eaa0b0af69","target":"graph","created_at":"2026-05-18T00:32:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Nearly every popular programming language comes with one or more package managers. The software packages distributed by such package managers form large software ecosystems. These packaging ecosystems contain a large number of package releases that are updated regularly and that have many dependencies to other package releases. While packaging ecosystems are extremely useful for their respective communities of developers, they face challenges related to their scale, complexity, and rate of evolution. Typical problems are backward incompatible package updates, and the risk of (transitively) dep","authors_text":"Alexandre Decan, Philippe Grosjean, Tom Mens","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-10-13T14:23:36Z","title":"An Empirical Comparison of Dependency Network Evolution in Seven Software Packaging Ecosystems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.04936","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9f8cad1641b6d2122ac8d968109027fcffd77e57fee85c817c1cf5026a7765f0","target":"record","created_at":"2026-05-18T00:32:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5b97a7692c445bf3d3ab76ab50ad5adc2e850401fc76a5d78cec48d8c2737874","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2017-10-13T14:23:36Z","title_canon_sha256":"23f2b108f1950deb6339f6d33cc549867ebb50741d543ad4e4bc8a4dc56a62d5"},"schema_version":"1.0","source":{"id":"1710.04936","kind":"arxiv","version":1}},"canonical_sha256":"42b25b537a8599abf412eb503f56a2ca2cd7a3a21eb9e760968ba44090f81da7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"42b25b537a8599abf412eb503f56a2ca2cd7a3a21eb9e760968ba44090f81da7","first_computed_at":"2026-05-18T00:32:56.269971Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:32:56.269971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fjKXLGCZwKt9HdTmDsDpx7+124hFu4SDLOks29kJzO8suJ3fME/INd1whsuAr9mNB3AKVBKlY2oGABsVwsRjBA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:32:56.270533Z","signed_message":"canonical_sha256_bytes"},"source_id":"1710.04936","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9f8cad1641b6d2122ac8d968109027fcffd77e57fee85c817c1cf5026a7765f0","sha256:d69941031db5d8747aab95b3e8bfaabcb4905777acc188b171be35eaa0b0af69"],"state_sha256":"f92c88dc0950b41a3afe9e84af68e5592396b9074ac8861a6d63686f83623bff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N1z8Y0oQoNpmYMc1eHYzfJlVdcBiBo9Iv0Q3CkeF8QjSodI6T+lMvivVU+GU/x7k5eb4yMgDaFZEEwjYicmWDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-03T02:41:20.822084Z","bundle_sha256":"1fdfa309279235859b9f9a3ec9b34ca1a54f27352e32bd14c9bb742fd7a0ba77"}}