{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:KXBQ23P37IZKEWNW7M4MPDDS3X","short_pith_number":"pith:KXBQ23P3","schema_version":"1.0","canonical_sha256":"55c30d6dfbfa32a259b6fb38c78c72ddc23346cd1ce87b86cd7f17de089ebe0d","source":{"kind":"arxiv","id":"2504.09834","version":1},"attestation_state":"computed","paper":{"title":"Mining for Lags in Updating Critical Security Threats: A Case Study of Log4j Library","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Hidetake Tanaka, Kazumasa Shimari, Kazuma Yamasaki, Kenichi Matsumoto, Momoka Hirose, Raula Gaikovina Kula, Takashi Nakano, Youmei Fan","submitted_at":"2025-04-14T03:02:16Z","abstract_excerpt":"The Log4j-Core vulnerability, known as Log4Shell, exposed significant challenges to dependency management in software ecosystems. When a critical vulnerability is disclosed, it is imperative that dependent packages quickly adopt patched versions to mitigate risks. However, delays in applying these updates can leave client systems exposed to exploitation. Previous research has primarily focused on NPM, but there is a need for similar analysis in other ecosystems, such as Maven. Leveraging the 2025 mining challenge dataset of Java dependencies, we identify factors influencing update lags and cat"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2504.09834","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-04-14T03:02:16Z","cross_cats_sorted":[],"title_canon_sha256":"372fb602b7f5b6c7ff9ea636a8eb08f590f8db1be6763ced8627c20a5f257ee9","abstract_canon_sha256":"3e257980e938a96be06549959433d030913180ff4b498d8bad97b7e7bbebd99b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:48:43.466650Z","signature_b64":"6zs29eRZ9C0kUIkRtcP6oHvVxIA+sTJoCxid/A8oInAMPG+9CRCxr1ftG7TuXnXHl7HBwSh2h7+rWjX3EJOyAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"55c30d6dfbfa32a259b6fb38c78c72ddc23346cd1ce87b86cd7f17de089ebe0d","last_reissued_at":"2026-07-05T10:48:43.466172Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:48:43.466172Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Mining for Lags in Updating Critical Security Threats: A Case Study of Log4j Library","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Hidetake Tanaka, Kazumasa Shimari, Kazuma Yamasaki, Kenichi Matsumoto, Momoka Hirose, Raula Gaikovina Kula, Takashi Nakano, Youmei Fan","submitted_at":"2025-04-14T03:02:16Z","abstract_excerpt":"The Log4j-Core vulnerability, known as Log4Shell, exposed significant challenges to dependency management in software ecosystems. When a critical vulnerability is disclosed, it is imperative that dependent packages quickly adopt patched versions to mitigate risks. However, delays in applying these updates can leave client systems exposed to exploitation. Previous research has primarily focused on NPM, but there is a need for similar analysis in other ecosystems, such as Maven. Leveraging the 2025 mining challenge dataset of Java dependencies, we identify factors influencing update lags and cat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09834","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.09834/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2504.09834","created_at":"2026-07-05T10:48:43.466229+00:00"},{"alias_kind":"arxiv_version","alias_value":"2504.09834v1","created_at":"2026-07-05T10:48:43.466229+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09834","created_at":"2026-07-05T10:48:43.466229+00:00"},{"alias_kind":"pith_short_12","alias_value":"KXBQ23P37IZK","created_at":"2026-07-05T10:48:43.466229+00:00"},{"alias_kind":"pith_short_16","alias_value":"KXBQ23P37IZKEWNW","created_at":"2026-07-05T10:48:43.466229+00:00"},{"alias_kind":"pith_short_8","alias_value":"KXBQ23P3","created_at":"2026-07-05T10:48:43.466229+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X","json":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X.json","graph_json":"https://pith.science/api/pith-number/KXBQ23P37IZKEWNW7M4MPDDS3X/graph.json","events_json":"https://pith.science/api/pith-number/KXBQ23P37IZKEWNW7M4MPDDS3X/events.json","paper":"https://pith.science/paper/KXBQ23P3"},"agent_actions":{"view_html":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X","download_json":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X.json","view_paper":"https://pith.science/paper/KXBQ23P3","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2504.09834&json=true","fetch_graph":"https://pith.science/api/pith-number/KXBQ23P37IZKEWNW7M4MPDDS3X/graph.json","fetch_events":"https://pith.science/api/pith-number/KXBQ23P37IZKEWNW7M4MPDDS3X/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X/action/timestamp_anchor","attest_storage":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X/action/storage_attestation","attest_author":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X/action/author_attestation","sign_citation":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X/action/citation_signature","submit_replication":"https://pith.science/pith/KXBQ23P37IZKEWNW7M4MPDDS3X/action/replication_record"}},"created_at":"2026-07-05T10:48:43.466229+00:00","updated_at":"2026-07-05T10:48:43.466229+00:00"}