{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:P54FHXNJRRWV7F2IBJXFCD7QAH","short_pith_number":"pith:P54FHXNJ","canonical_record":{"source":{"id":"2504.12261","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-16T17:15:58Z","cross_cats_sorted":[],"title_canon_sha256":"b214e4a606d326a5ecbd6b6ff051e3d1726afb5e754514c231aae94a66db4a97","abstract_canon_sha256":"a42588bf1aef4fe7039807e918297c631e39c2cf834d324f10eb9428e0bb4570"},"schema_version":"1.0"},"canonical_sha256":"7f7853dda98c6d5f97480a6e510ff001f52044c11b3b60f9283dcb81bbce1869","source":{"kind":"arxiv","id":"2504.12261","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.12261","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"arxiv_version","alias_value":"2504.12261v1","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.12261","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_12","alias_value":"P54FHXNJRRWV","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_16","alias_value":"P54FHXNJRRWV7F2I","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_8","alias_value":"P54FHXNJ","created_at":"2026-07-05T10:50:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:P54FHXNJRRWV7F2IBJXFCD7QAH","target":"record","payload":{"canonical_record":{"source":{"id":"2504.12261","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-16T17:15:58Z","cross_cats_sorted":[],"title_canon_sha256":"b214e4a606d326a5ecbd6b6ff051e3d1726afb5e754514c231aae94a66db4a97","abstract_canon_sha256":"a42588bf1aef4fe7039807e918297c631e39c2cf834d324f10eb9428e0bb4570"},"schema_version":"1.0"},"canonical_sha256":"7f7853dda98c6d5f97480a6e510ff001f52044c11b3b60f9283dcb81bbce1869","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:50:05.036977Z","signature_b64":"reZtWGoKIGekSPkliuOHw17yZ0Smn5GZG7Z/SqoYCYzBgngQIqgd43CE7F0PrfIXJW4WeMUEPheAlwCrSE+MDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7f7853dda98c6d5f97480a6e510ff001f52044c11b3b60f9283dcb81bbce1869","last_reissued_at":"2026-07-05T10:50:05.036483Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:50:05.036483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.12261","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:50:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xN6YcGKxZxRlU9c2GZHP/HeX5eYnRwk8of2/Mpe4gBk/Z8zpj3qDBZnmFQ0aCdpdoT5R7GEAhOsA/VoEI/24Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T12:15:23.267565Z"},"content_sha256":"032ebfc9fdebf23f4eadbf4d8102541275168f8b646340a3b5679a16b86f589e","schema_version":"1.0","event_id":"sha256:032ebfc9fdebf23f4eadbf4d8102541275168f8b646340a3b5679a16b86f589e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:P54FHXNJRRWV7F2IBJXFCD7QAH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dependency Dilemmas: A Comparative Study of Independent and Dependent Artifacts in Maven Central Ecosystem","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Manishankar Mondal, Mehedi Hasan Shanto, Muhammad Asaduzzaman, Shaiful Chowdhury","submitted_at":"2025-04-16T17:15:58Z","abstract_excerpt":"The Maven Central ecosystem forms the backbone of Java dependency management, hosting artifacts that vary significantly in their adoption, security, and ecosystem roles. Artifact reuse is fundamental in software development, with ecosystems like Maven Central facilitating this process. However, prior studies predominantly analyzed popular artifacts with numerous dependencies, leaving those without incoming dependencies (independent artifacts) unexplored. In this study, we analyzed 658,078 artifacts, of which 635,003 had at least one release. Among these, 93,101 artifacts (15.4%) were identifie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.12261","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.12261/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:50:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JtRipzE2cc3y1mkRgddxxHkv4NHQrIhXoKGrxBtuiW/diISxwfEchuSJ556f6PomDZ2rOZBj7kv7uB/9ArHCAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T12:15:23.268055Z"},"content_sha256":"3baf6a40a1d989d485a6b0a77be0a46414e477fb565ae2c44729b75c0136ff24","schema_version":"1.0","event_id":"sha256:3baf6a40a1d989d485a6b0a77be0a46414e477fb565ae2c44729b75c0136ff24"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/bundle.json","state_url":"https://pith.science/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T12:15:23Z","links":{"resolver":"https://pith.science/pith/P54FHXNJRRWV7F2IBJXFCD7QAH","bundle":"https://pith.science/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/bundle.json","state":"https://pith.science/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P54FHXNJRRWV7F2IBJXFCD7QAH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:P54FHXNJRRWV7F2IBJXFCD7QAH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a42588bf1aef4fe7039807e918297c631e39c2cf834d324f10eb9428e0bb4570","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-16T17:15:58Z","title_canon_sha256":"b214e4a606d326a5ecbd6b6ff051e3d1726afb5e754514c231aae94a66db4a97"},"schema_version":"1.0","source":{"id":"2504.12261","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.12261","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"arxiv_version","alias_value":"2504.12261v1","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.12261","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_12","alias_value":"P54FHXNJRRWV","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_16","alias_value":"P54FHXNJRRWV7F2I","created_at":"2026-07-05T10:50:05Z"},{"alias_kind":"pith_short_8","alias_value":"P54FHXNJ","created_at":"2026-07-05T10:50:05Z"}],"graph_snapshots":[{"event_id":"sha256:3baf6a40a1d989d485a6b0a77be0a46414e477fb565ae2c44729b75c0136ff24","target":"graph","created_at":"2026-07-05T10:50:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.12261/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Maven Central ecosystem forms the backbone of Java dependency management, hosting artifacts that vary significantly in their adoption, security, and ecosystem roles. Artifact reuse is fundamental in software development, with ecosystems like Maven Central facilitating this process. However, prior studies predominantly analyzed popular artifacts with numerous dependencies, leaving those without incoming dependencies (independent artifacts) unexplored. In this study, we analyzed 658,078 artifacts, of which 635,003 had at least one release. Among these, 93,101 artifacts (15.4%) were identifie","authors_text":"Manishankar Mondal, Mehedi Hasan Shanto, Muhammad Asaduzzaman, Shaiful Chowdhury","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-16T17:15:58Z","title":"Dependency Dilemmas: A Comparative Study of Independent and Dependent Artifacts in Maven Central Ecosystem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.12261","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:032ebfc9fdebf23f4eadbf4d8102541275168f8b646340a3b5679a16b86f589e","target":"record","created_at":"2026-07-05T10:50:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a42588bf1aef4fe7039807e918297c631e39c2cf834d324f10eb9428e0bb4570","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-04-16T17:15:58Z","title_canon_sha256":"b214e4a606d326a5ecbd6b6ff051e3d1726afb5e754514c231aae94a66db4a97"},"schema_version":"1.0","source":{"id":"2504.12261","kind":"arxiv","version":1}},"canonical_sha256":"7f7853dda98c6d5f97480a6e510ff001f52044c11b3b60f9283dcb81bbce1869","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7f7853dda98c6d5f97480a6e510ff001f52044c11b3b60f9283dcb81bbce1869","first_computed_at":"2026-07-05T10:50:05.036483Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:50:05.036483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"reZtWGoKIGekSPkliuOHw17yZ0Smn5GZG7Z/SqoYCYzBgngQIqgd43CE7F0PrfIXJW4WeMUEPheAlwCrSE+MDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:50:05.036977Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.12261","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:032ebfc9fdebf23f4eadbf4d8102541275168f8b646340a3b5679a16b86f589e","sha256:3baf6a40a1d989d485a6b0a77be0a46414e477fb565ae2c44729b75c0136ff24"],"state_sha256":"76162009db09e327759197a1f55c860a5f1734799ae31743a8a05c7df0ea41f5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Mjry20gbyVz/jZJ1N5gCV1nfitqyvZyuubWX0Xp8bjop3yk8BmS1fHQgUKQJkzUCSTuP/r3XUZ4RG5ddLFFpCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T12:15:23.271733Z","bundle_sha256":"57dd96e429abf9fb95c79385dbcd619ac1b6e4f264a81e8d86433fe14b3cc903"}}