{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KB7CZLSUSG4OYS3BGSWNWRXXLW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bb4d80ce5738df619f41865a741f34e58e1b23b364ba3fc89c1f2b2998f8353c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-12T00:15:03Z","title_canon_sha256":"e7a9fdfd0dc9916a489bb2c868b691342669df972f62bc3832b5fe77787d1259"},"schema_version":"1.0","source":{"id":"2409.07669","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07669","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07669v2","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07669","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_12","alias_value":"KB7CZLSUSG4O","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_16","alias_value":"KB7CZLSUSG4OYS3B","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_8","alias_value":"KB7CZLSU","created_at":"2026-07-05T10:08:53Z"}],"graph_snapshots":[{"event_id":"sha256:7b819401ed2baf3463214a78daefe6b6b2b2df34df4a75bea25b80aebe0b3383","target":"graph","created_at":"2026-07-05T10:08:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.07669/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In open-source software (OSS), software vulnerabilities have significantly increased. Although researchers have investigated the perspectives of vulnerability reporters and OSS contributor security practices, understanding the perspectives of OSS maintainers on vulnerability management and platform security features is currently understudied. In this paper, we investigate the perspectives of OSS maintainers who maintain projects listed in the GitHub Advisory Database. We explore this area by conducting two studies: identifying aspects through a listing survey ($n_1=80$) and gathering insights ","authors_text":"Jessy Ayala, Joshua Garcia, Yu-Jye Tung","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-12T00:15:03Z","title":"A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07669","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1199b7ec305fd33453811c08e59b2a53bd356a679f4e47151edb7681029c0e7f","target":"record","created_at":"2026-07-05T10:08:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bb4d80ce5738df619f41865a741f34e58e1b23b364ba3fc89c1f2b2998f8353c","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-12T00:15:03Z","title_canon_sha256":"e7a9fdfd0dc9916a489bb2c868b691342669df972f62bc3832b5fe77787d1259"},"schema_version":"1.0","source":{"id":"2409.07669","kind":"arxiv","version":2}},"canonical_sha256":"507e2cae5491b8ec4b6134acdb46f75d8ff7b19d4e92238baa8003a329549658","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"507e2cae5491b8ec4b6134acdb46f75d8ff7b19d4e92238baa8003a329549658","first_computed_at":"2026-07-05T10:08:53.423478Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:08:53.423478Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UtpoFZHRyq3Ii4idzp/uDk8jY5o6SLdpmdiglpf1PLEZIq/00WSgiW1hrT/rR2woaOiK3YtA/NJmdxor5k9nDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:08:53.423890Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.07669","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1199b7ec305fd33453811c08e59b2a53bd356a679f4e47151edb7681029c0e7f","sha256:7b819401ed2baf3463214a78daefe6b6b2b2df34df4a75bea25b80aebe0b3383"],"state_sha256":"2a5e8fe9bfc856f306d22e61ea1dc39033ae68f3fa42441696780b16909d9913"}