{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:KBP7WPWHOHLNXFY6UXA3ZLZWS7","short_pith_number":"pith:KBP7WPWH","canonical_record":{"source":{"id":"2111.09625","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-18T11:10:04Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"7a181f811cbed2dce5261d9215a76f0794c8d6d72f0633d4c2a5fd8e4cf87a49","abstract_canon_sha256":"721c41ebcf1c7d35dbd2bfd04f15b04f5f2e3c9d8f4890b7dfd65db611adf9e8"},"schema_version":"1.0"},"canonical_sha256":"505ffb3ec771d6db971ea5c1bcaf3697e0741a416ea413480333359f36a42d35","source":{"kind":"arxiv","id":"2111.09625","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.09625","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"arxiv_version","alias_value":"2111.09625v1","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.09625","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_12","alias_value":"KBP7WPWHOHLN","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_16","alias_value":"KBP7WPWHOHLNXFY6","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_8","alias_value":"KBP7WPWH","created_at":"2026-07-05T03:33:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:KBP7WPWHOHLNXFY6UXA3ZLZWS7","target":"record","payload":{"canonical_record":{"source":{"id":"2111.09625","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-18T11:10:04Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"7a181f811cbed2dce5261d9215a76f0794c8d6d72f0633d4c2a5fd8e4cf87a49","abstract_canon_sha256":"721c41ebcf1c7d35dbd2bfd04f15b04f5f2e3c9d8f4890b7dfd65db611adf9e8"},"schema_version":"1.0"},"canonical_sha256":"505ffb3ec771d6db971ea5c1bcaf3697e0741a416ea413480333359f36a42d35","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:33:13.423447Z","signature_b64":"D5Vl+325ZTSpUZEZPGAGPdOrqzgw1W8OezvqtrQqkeyIWDUGaC+VojCEOMeC8mCgCdFIDNiAOg/A7waiHypJDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"505ffb3ec771d6db971ea5c1bcaf3697e0741a416ea413480333359f36a42d35","last_reissued_at":"2026-07-05T03:33:13.422821Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:33:13.422821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.09625","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"44w9NXwrXK0kZGFzxQLK+t2kQoryZfyau0zgnRaPf8gZbLcwa3cPRKoTL/mHzdS2A+0iM0H5jjcLSTeUaAWLBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:13:02.303830Z"},"content_sha256":"5849250e0d09893662bde2eb6495cf862a9a557d2c71e7a37d084d4160d53356","schema_version":"1.0","event_id":"sha256:5849250e0d09893662bde2eb6495cf862a9a557d2c71e7a37d084d4160d53356"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:KBP7WPWHOHLNXFY6UXA3ZLZWS7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"InspectJS: Leveraging Code Similarity and User-Feedback for Effective Taint Specification Inference for JavaScript","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Diego Garbervetsky, Max Sch\\\"afer, Saikat Dutta, Shuvendu Lahiri","submitted_at":"2021-11-18T11:10:04Z","abstract_excerpt":"Static analysis has established itself as a weapon of choice for detecting security vulnerabilities. Taint analysis in particular is a very general and powerful technique, where security policies are expressed in terms of forbidden flows, either from untrusted input sources to sensitive sinks (in integrity policies) or from sensitive sources to untrusted sinks (in confidentiality policies). The appeal of this approach is that the taint-tracking mechanism has to be implemented only once, and can then be parameterized with different taint specifications (that is, sets of sources and sinks, as we"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.09625","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.09625/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SUkxagrSWjDgsnzj//IjYW8kTZrh00kYRM7XetMTm7LuY24nj1iXQSWAvuPOUSMoUO4FyzDoUwHVn47x01T1BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:13:02.304348Z"},"content_sha256":"4c6698817c84be320b5762d5d7c5281edcd8cf9d41650c506b27dff8383c8174","schema_version":"1.0","event_id":"sha256:4c6698817c84be320b5762d5d7c5281edcd8cf9d41650c506b27dff8383c8174"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/bundle.json","state_url":"https://pith.science/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T21:13:02Z","links":{"resolver":"https://pith.science/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7","bundle":"https://pith.science/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/bundle.json","state":"https://pith.science/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KBP7WPWHOHLNXFY6UXA3ZLZWS7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:KBP7WPWHOHLNXFY6UXA3ZLZWS7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"721c41ebcf1c7d35dbd2bfd04f15b04f5f2e3c9d8f4890b7dfd65db611adf9e8","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-18T11:10:04Z","title_canon_sha256":"7a181f811cbed2dce5261d9215a76f0794c8d6d72f0633d4c2a5fd8e4cf87a49"},"schema_version":"1.0","source":{"id":"2111.09625","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.09625","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"arxiv_version","alias_value":"2111.09625v1","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.09625","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_12","alias_value":"KBP7WPWHOHLN","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_16","alias_value":"KBP7WPWHOHLNXFY6","created_at":"2026-07-05T03:33:13Z"},{"alias_kind":"pith_short_8","alias_value":"KBP7WPWH","created_at":"2026-07-05T03:33:13Z"}],"graph_snapshots":[{"event_id":"sha256:4c6698817c84be320b5762d5d7c5281edcd8cf9d41650c506b27dff8383c8174","target":"graph","created_at":"2026-07-05T03:33:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.09625/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Static analysis has established itself as a weapon of choice for detecting security vulnerabilities. Taint analysis in particular is a very general and powerful technique, where security policies are expressed in terms of forbidden flows, either from untrusted input sources to sensitive sinks (in integrity policies) or from sensitive sources to untrusted sinks (in confidentiality policies). The appeal of this approach is that the taint-tracking mechanism has to be implemented only once, and can then be parameterized with different taint specifications (that is, sets of sources and sinks, as we","authors_text":"Diego Garbervetsky, Max Sch\\\"afer, Saikat Dutta, Shuvendu Lahiri","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-18T11:10:04Z","title":"InspectJS: Leveraging Code Similarity and User-Feedback for Effective Taint Specification Inference for JavaScript"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.09625","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5849250e0d09893662bde2eb6495cf862a9a557d2c71e7a37d084d4160d53356","target":"record","created_at":"2026-07-05T03:33:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"721c41ebcf1c7d35dbd2bfd04f15b04f5f2e3c9d8f4890b7dfd65db611adf9e8","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-18T11:10:04Z","title_canon_sha256":"7a181f811cbed2dce5261d9215a76f0794c8d6d72f0633d4c2a5fd8e4cf87a49"},"schema_version":"1.0","source":{"id":"2111.09625","kind":"arxiv","version":1}},"canonical_sha256":"505ffb3ec771d6db971ea5c1bcaf3697e0741a416ea413480333359f36a42d35","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"505ffb3ec771d6db971ea5c1bcaf3697e0741a416ea413480333359f36a42d35","first_computed_at":"2026-07-05T03:33:13.422821Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:33:13.422821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"D5Vl+325ZTSpUZEZPGAGPdOrqzgw1W8OezvqtrQqkeyIWDUGaC+VojCEOMeC8mCgCdFIDNiAOg/A7waiHypJDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:33:13.423447Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.09625","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5849250e0d09893662bde2eb6495cf862a9a557d2c71e7a37d084d4160d53356","sha256:4c6698817c84be320b5762d5d7c5281edcd8cf9d41650c506b27dff8383c8174"],"state_sha256":"34f949aa13930af91c3d745921cb444ac8a665dc8a1091c41c7a1670e361019c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N5KDn7pilJwkPVxGeg4h8Yli2G4tDoDBLpx7q4c2vZ0DZFm4Hq7Gqs9njtki3Ysw0BR87leLRV1G31ozn89ZAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T21:13:02.308428Z","bundle_sha256":"5ba69818d7a3b21739fbe87a7d5931dc13936efa827d3da1f97fbf8b9643f350"}}