{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MJGBNWUNVJC5NP23YKEZ43OIP6","short_pith_number":"pith:MJGBNWUN","canonical_record":{"source":{"id":"2401.11105","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-01-20T03:36:01Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"a4bc53d4e74c2a0859306377bd8b93c2d2555974ab90feb3639adae10c4e071a","abstract_canon_sha256":"02440183882f885b6258dc3248d5cc5d99f48ea807f72e8b93cff9170681dfeb"},"schema_version":"1.0"},"canonical_sha256":"624c16da8daa45d6bf5bc2899e6dc87f89f5eef5116a73b44b61974295d93b30","source":{"kind":"arxiv","id":"2401.11105","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.11105","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"arxiv_version","alias_value":"2401.11105v1","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.11105","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_12","alias_value":"MJGBNWUNVJC5","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_16","alias_value":"MJGBNWUNVJC5NP23","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_8","alias_value":"MJGBNWUN","created_at":"2026-07-05T07:35:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MJGBNWUNVJC5NP23YKEZ43OIP6","target":"record","payload":{"canonical_record":{"source":{"id":"2401.11105","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-01-20T03:36:01Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"a4bc53d4e74c2a0859306377bd8b93c2d2555974ab90feb3639adae10c4e071a","abstract_canon_sha256":"02440183882f885b6258dc3248d5cc5d99f48ea807f72e8b93cff9170681dfeb"},"schema_version":"1.0"},"canonical_sha256":"624c16da8daa45d6bf5bc2899e6dc87f89f5eef5116a73b44b61974295d93b30","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:35:46.008818Z","signature_b64":"o1ZXLXplKkRwNzGbOrOckLLX6soLEcz5/ZXUMBV/AibVTYlpyitDdIGZYDTdGlVN7wOsLXr41lvQF+vRyncnCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"624c16da8daa45d6bf5bc2899e6dc87f89f5eef5116a73b44b61974295d93b30","last_reissued_at":"2026-07-05T07:35:46.008402Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:35:46.008402Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.11105","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k+kK5dTDsnVh0wuhOaN4Z5elQENEk0dInVvwQfXY2No6RkCsKXowKis8TcFyOAZDzk4QrF01dSkXn3DzajX9Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:21:03.529926Z"},"content_sha256":"12553e818ae6101011db43f56497cfa1e92f422c6162d466b08ca564d98c86a1","schema_version":"1.0","event_id":"sha256:12553e818ae6101011db43f56497cfa1e92f422c6162d466b08ca564d98c86a1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MJGBNWUNVJC5NP23YKEZ43OIP6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are Latent Vulnerabilities Hidden Gems for Software Vulnerability Prediction? An Empirical Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.SE","authors_text":"M. Ali Babar, Triet H. M. Le, Xiaoning Du","submitted_at":"2024-01-20T03:36:01Z","abstract_excerpt":"Collecting relevant and high-quality data is integral to the development of effective Software Vulnerability (SV) prediction models. Most of the current SV datasets rely on SV-fixing commits to extract vulnerable functions and lines. However, none of these datasets have considered latent SVs existing between the introduction and fix of the collected SVs. There is also little known about the usefulness of these latent SVs for SV prediction. To bridge these gaps, we conduct a large-scale study on the latent vulnerable functions in two commonly used SV datasets and their utilization for function-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.11105","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.11105/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n41QOMj7VzxeHT0ue7LTaAdZC0XKTa09M3vITTkxSWO3+PiqgXHv3UKVF8QWBem67OloZBwZTpr/YYSCyIRyCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T13:21:03.530449Z"},"content_sha256":"ada4b8cad11ed4b5f9b865c223e86cc2f2a01e61e8a34e9ef2d655d05bb944e9","schema_version":"1.0","event_id":"sha256:ada4b8cad11ed4b5f9b865c223e86cc2f2a01e61e8a34e9ef2d655d05bb944e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/bundle.json","state_url":"https://pith.science/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T13:21:03Z","links":{"resolver":"https://pith.science/pith/MJGBNWUNVJC5NP23YKEZ43OIP6","bundle":"https://pith.science/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/bundle.json","state":"https://pith.science/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MJGBNWUNVJC5NP23YKEZ43OIP6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MJGBNWUNVJC5NP23YKEZ43OIP6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02440183882f885b6258dc3248d5cc5d99f48ea807f72e8b93cff9170681dfeb","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-01-20T03:36:01Z","title_canon_sha256":"a4bc53d4e74c2a0859306377bd8b93c2d2555974ab90feb3639adae10c4e071a"},"schema_version":"1.0","source":{"id":"2401.11105","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.11105","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"arxiv_version","alias_value":"2401.11105v1","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.11105","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_12","alias_value":"MJGBNWUNVJC5","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_16","alias_value":"MJGBNWUNVJC5NP23","created_at":"2026-07-05T07:35:46Z"},{"alias_kind":"pith_short_8","alias_value":"MJGBNWUN","created_at":"2026-07-05T07:35:46Z"}],"graph_snapshots":[{"event_id":"sha256:ada4b8cad11ed4b5f9b865c223e86cc2f2a01e61e8a34e9ef2d655d05bb944e9","target":"graph","created_at":"2026-07-05T07:35:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.11105/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Collecting relevant and high-quality data is integral to the development of effective Software Vulnerability (SV) prediction models. Most of the current SV datasets rely on SV-fixing commits to extract vulnerable functions and lines. However, none of these datasets have considered latent SVs existing between the introduction and fix of the collected SVs. There is also little known about the usefulness of these latent SVs for SV prediction. To bridge these gaps, we conduct a large-scale study on the latent vulnerable functions in two commonly used SV datasets and their utilization for function-","authors_text":"M. Ali Babar, Triet H. M. Le, Xiaoning Du","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-01-20T03:36:01Z","title":"Are Latent Vulnerabilities Hidden Gems for Software Vulnerability Prediction? An Empirical Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.11105","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:12553e818ae6101011db43f56497cfa1e92f422c6162d466b08ca564d98c86a1","target":"record","created_at":"2026-07-05T07:35:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02440183882f885b6258dc3248d5cc5d99f48ea807f72e8b93cff9170681dfeb","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-01-20T03:36:01Z","title_canon_sha256":"a4bc53d4e74c2a0859306377bd8b93c2d2555974ab90feb3639adae10c4e071a"},"schema_version":"1.0","source":{"id":"2401.11105","kind":"arxiv","version":1}},"canonical_sha256":"624c16da8daa45d6bf5bc2899e6dc87f89f5eef5116a73b44b61974295d93b30","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"624c16da8daa45d6bf5bc2899e6dc87f89f5eef5116a73b44b61974295d93b30","first_computed_at":"2026-07-05T07:35:46.008402Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:35:46.008402Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o1ZXLXplKkRwNzGbOrOckLLX6soLEcz5/ZXUMBV/AibVTYlpyitDdIGZYDTdGlVN7wOsLXr41lvQF+vRyncnCw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:35:46.008818Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.11105","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:12553e818ae6101011db43f56497cfa1e92f422c6162d466b08ca564d98c86a1","sha256:ada4b8cad11ed4b5f9b865c223e86cc2f2a01e61e8a34e9ef2d655d05bb944e9"],"state_sha256":"93816ed41727f9549cc2bb984bc87af9ae8e3cfcc1be16288d95b9399ab38c47"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nt5YXZnmjzJQP4SnPT+wE7OPuJ0UV00qj2ntFmHX/W0hzy4bCB4xZefbb+RfmOQefBPxO62G2E/fEgrIDaajBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T13:21:03.541640Z","bundle_sha256":"4176a86cb39739e29905fbd12a578ec79fb0ba999ceb0bc7e07a93a4eed910eb"}}