{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JL6HB3QN6O53THY2YN4M64AR6V","short_pith_number":"pith:JL6HB3QN","canonical_record":{"source":{"id":"2509.22202","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-09-26T11:14:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"d3a5d1664b97fb3a9e3c5b04abd61cdd20fa75855816d32049cae3d95acb3385","abstract_canon_sha256":"516fba8b7d1d4bb3d22a9a8c608265703a696c44d1166eca6090c205406ed102"},"schema_version":"1.0"},"canonical_sha256":"4afc70ee0df3bbb99f1ac378cf7011f575757d7cd809ada438e9cd2d66db9882","source":{"kind":"arxiv","id":"2509.22202","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.22202","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2509.22202v3","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.22202","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"JL6HB3QN6O53","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"JL6HB3QN6O53THY2","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"JL6HB3QN","created_at":"2026-05-20T01:04:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JL6HB3QN6O53THY2YN4M64AR6V","target":"record","payload":{"canonical_record":{"source":{"id":"2509.22202","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-09-26T11:14:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"d3a5d1664b97fb3a9e3c5b04abd61cdd20fa75855816d32049cae3d95acb3385","abstract_canon_sha256":"516fba8b7d1d4bb3d22a9a8c608265703a696c44d1166eca6090c205406ed102"},"schema_version":"1.0"},"canonical_sha256":"4afc70ee0df3bbb99f1ac378cf7011f575757d7cd809ada438e9cd2d66db9882","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-20T01:04:58.378491Z","signature_b64":"0Eurof4Daha0NuVwYtRKs0Q74ZjNuMK3pcdlbBcWiDQFK+M8XG9VZgMfG3JQVlDlS+lCI4DwZDczrAkPZxNsBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4afc70ee0df3bbb99f1ac378cf7011f575757d7cd809ada438e9cd2d66db9882","last_reissued_at":"2026-05-20T01:04:58.377605Z","signature_status":"signed_v1","first_computed_at":"2026-05-20T01:04:58.377605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.22202","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T01:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V+yfPYEKa1HrbQcugC+IT7BGRw1wlik5CzUy3/Ww95rG0HroiWMJhFYUnglzpOduRHmZpk2XeRZq3JX7LT91Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-24T05:06:14.428484Z"},"content_sha256":"5924b84eb25ec97e369b4ad3f42eb4eb9d2d29044d680b0e0838d2f48676b32b","schema_version":"1.0","event_id":"sha256:5924b84eb25ec97e369b4ad3f42eb4eb9d2d29044d680b0e0838d2f48676b32b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JL6HB3QN6O53THY2YN4M64AR6V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Library Hallucinations in LLM-Generated Code: A Risk Analysis Grounded in Developer Queries","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.SE","authors_text":"Helen Yannakoudakis, Jie M. Zhang, Lukas Twist, Mark Harman","submitted_at":"2025-09-26T11:14:38Z","abstract_excerpt":"Large language models (LLMs) now play a central role in code generation, yet they continue to hallucinate, frequently inventing non-existent libraries. Such library hallucinations are not just benign errors: they can mislead developers, break builds, and expose systems to supply chain threats such as slopsquatting. Despite growing awareness of these risks, there is limited understanding of how library hallucinations manifest under realistic usage conditions. To fill this gap, we present the first systematic study of how user-level prompt variations influence library hallucinations in LLM-gener"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.22202","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.22202/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T01:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GztibXuH8nb6e7sdyfNU7xTUsHNcEYQPGlp6HWPMzwF82AVYKW6he1b4dLv6y0oFU61e7fH8NZKDUSGSCY+QCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-24T05:06:14.429225Z"},"content_sha256":"32670dda68d4b25e5460de411bd64d63e35bbebd3bb15e2628e930bbc07d6ebc","schema_version":"1.0","event_id":"sha256:32670dda68d4b25e5460de411bd64d63e35bbebd3bb15e2628e930bbc07d6ebc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JL6HB3QN6O53THY2YN4M64AR6V/bundle.json","state_url":"https://pith.science/pith/JL6HB3QN6O53THY2YN4M64AR6V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JL6HB3QN6O53THY2YN4M64AR6V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-24T05:06:14Z","links":{"resolver":"https://pith.science/pith/JL6HB3QN6O53THY2YN4M64AR6V","bundle":"https://pith.science/pith/JL6HB3QN6O53THY2YN4M64AR6V/bundle.json","state":"https://pith.science/pith/JL6HB3QN6O53THY2YN4M64AR6V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JL6HB3QN6O53THY2YN4M64AR6V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JL6HB3QN6O53THY2YN4M64AR6V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"516fba8b7d1d4bb3d22a9a8c608265703a696c44d1166eca6090c205406ed102","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-09-26T11:14:38Z","title_canon_sha256":"d3a5d1664b97fb3a9e3c5b04abd61cdd20fa75855816d32049cae3d95acb3385"},"schema_version":"1.0","source":{"id":"2509.22202","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.22202","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2509.22202v3","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.22202","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"JL6HB3QN6O53","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"JL6HB3QN6O53THY2","created_at":"2026-05-20T01:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"JL6HB3QN","created_at":"2026-05-20T01:04:58Z"}],"graph_snapshots":[{"event_id":"sha256:32670dda68d4b25e5460de411bd64d63e35bbebd3bb15e2628e930bbc07d6ebc","target":"graph","created_at":"2026-05-20T01:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.22202/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) now play a central role in code generation, yet they continue to hallucinate, frequently inventing non-existent libraries. Such library hallucinations are not just benign errors: they can mislead developers, break builds, and expose systems to supply chain threats such as slopsquatting. Despite growing awareness of these risks, there is limited understanding of how library hallucinations manifest under realistic usage conditions. To fill this gap, we present the first systematic study of how user-level prompt variations influence library hallucinations in LLM-gener","authors_text":"Helen Yannakoudakis, Jie M. Zhang, Lukas Twist, Mark Harman","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-09-26T11:14:38Z","title":"Library Hallucinations in LLM-Generated Code: A Risk Analysis Grounded in Developer Queries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.22202","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5924b84eb25ec97e369b4ad3f42eb4eb9d2d29044d680b0e0838d2f48676b32b","target":"record","created_at":"2026-05-20T01:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"516fba8b7d1d4bb3d22a9a8c608265703a696c44d1166eca6090c205406ed102","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-09-26T11:14:38Z","title_canon_sha256":"d3a5d1664b97fb3a9e3c5b04abd61cdd20fa75855816d32049cae3d95acb3385"},"schema_version":"1.0","source":{"id":"2509.22202","kind":"arxiv","version":3}},"canonical_sha256":"4afc70ee0df3bbb99f1ac378cf7011f575757d7cd809ada438e9cd2d66db9882","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4afc70ee0df3bbb99f1ac378cf7011f575757d7cd809ada438e9cd2d66db9882","first_computed_at":"2026-05-20T01:04:58.377605Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-20T01:04:58.377605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0Eurof4Daha0NuVwYtRKs0Q74ZjNuMK3pcdlbBcWiDQFK+M8XG9VZgMfG3JQVlDlS+lCI4DwZDczrAkPZxNsBA==","signature_status":"signed_v1","signed_at":"2026-05-20T01:04:58.378491Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.22202","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5924b84eb25ec97e369b4ad3f42eb4eb9d2d29044d680b0e0838d2f48676b32b","sha256:32670dda68d4b25e5460de411bd64d63e35bbebd3bb15e2628e930bbc07d6ebc"],"state_sha256":"963bb8c7fcaf9be2470ad49e105001c6b806af29ea67115244af427c47c7578c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xEzVw3q/9jgs9mQDFzGNMMqGtLYgJMF8ImzrN1SMAxvOOKIZGG9xrrP5frD+yqObwpGgioejd7yVXTVZWXXmBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-24T05:06:14.435943Z","bundle_sha256":"be31463f0de3956cca1ec0eb3a6fdf1f57f4ae37d7c0be842802bd8be576aa1a"}}