{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:U4A6PESYFNTRGQQBIW3D2QN4L5","short_pith_number":"pith:U4A6PESY","canonical_record":{"source":{"id":"2405.20455","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-05-30T20:05:44Z","cross_cats_sorted":[],"title_canon_sha256":"5ee5915de0a4eb7f5428a5e220eba60a5664a089457de596efd61ef55a0c3a84","abstract_canon_sha256":"8df265f1980cef710ffc23472667c8c6ef4c955dd5a990b65957d11838c39274"},"schema_version":"1.0"},"canonical_sha256":"a701e792582b6713420145b63d41bc5f54dd8786a901c1ed9ecebbcbe9e5329a","source":{"kind":"arxiv","id":"2405.20455","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20455","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20455v5","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20455","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_12","alias_value":"U4A6PESYFNTR","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_16","alias_value":"U4A6PESYFNTRGQQB","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_8","alias_value":"U4A6PESY","created_at":"2026-07-05T09:23:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:U4A6PESYFNTRGQQBIW3D2QN4L5","target":"record","payload":{"canonical_record":{"source":{"id":"2405.20455","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-05-30T20:05:44Z","cross_cats_sorted":[],"title_canon_sha256":"5ee5915de0a4eb7f5428a5e220eba60a5664a089457de596efd61ef55a0c3a84","abstract_canon_sha256":"8df265f1980cef710ffc23472667c8c6ef4c955dd5a990b65957d11838c39274"},"schema_version":"1.0"},"canonical_sha256":"a701e792582b6713420145b63d41bc5f54dd8786a901c1ed9ecebbcbe9e5329a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:23:51.007061Z","signature_b64":"edttpfiNxP99sc9aWLO/W8xL6GmcWa27z7ICTmQPcT7vLpU7m2AF3Obd7JY/BEx9VyqA2jPXHq/GhC+b8z9LAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a701e792582b6713420145b63d41bc5f54dd8786a901c1ed9ecebbcbe9e5329a","last_reissued_at":"2026-07-05T09:23:51.006562Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:23:51.006562Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.20455","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x/6t/X67pMBOmxklFrpG4+l8GeKLAIVL7z7aoknPImhtm15hy2K8tMqVxUKZ1042hk10KW23WuucahPoGtKNDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:58:40.678236Z"},"content_sha256":"91224037f72b0ca5738e6d818462d0da62bd20cf5901f2189fec043d4846c87d","schema_version":"1.0","event_id":"sha256:91224037f72b0ca5738e6d818462d0da62bd20cf5901f2189fec043d4846c87d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:U4A6PESYFNTRGQQBIW3D2QN4L5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Mohannad Alhanahnah, Yazan Boshmaf","submitted_at":"2024-05-30T20:05:44Z","abstract_excerpt":"In the era of Large Language Models (LLMs) with their advanced capabilities, a unique opportunity arises to develop LLM-based digital assistant tools that can support software developers by facilitating comprehensive reasoning about software dependencies and open-source libraries before importing them. This reasoning process is daunting, mandating multiple specialized tools and dedicated expertise, each focusing on distinct aspects (e.g., security analysis tools may overlook design flaws such as circular dependencies, which hinder software maintainability). Creating a significant bottleneck in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20455","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.20455/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cHLUq8+ZW6dwIvhO83COYdvVndC8Z0ZWpPG6ZJQe9Z2uIrrFKiGqK7Ta3DuU57wtoWgeZBxzNIrlFh5CYd1KCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:58:40.679128Z"},"content_sha256":"47f8260a41cd4dfe6e1a30c0184f4065bfc22c8f3b68b22397da7ec4ffac0e40","schema_version":"1.0","event_id":"sha256:47f8260a41cd4dfe6e1a30c0184f4065bfc22c8f3b68b22397da7ec4ffac0e40"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/bundle.json","state_url":"https://pith.science/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T17:58:40Z","links":{"resolver":"https://pith.science/pith/U4A6PESYFNTRGQQBIW3D2QN4L5","bundle":"https://pith.science/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/bundle.json","state":"https://pith.science/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U4A6PESYFNTRGQQBIW3D2QN4L5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:U4A6PESYFNTRGQQBIW3D2QN4L5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8df265f1980cef710ffc23472667c8c6ef4c955dd5a990b65957d11838c39274","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-05-30T20:05:44Z","title_canon_sha256":"5ee5915de0a4eb7f5428a5e220eba60a5664a089457de596efd61ef55a0c3a84"},"schema_version":"1.0","source":{"id":"2405.20455","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20455","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20455v5","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20455","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_12","alias_value":"U4A6PESYFNTR","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_16","alias_value":"U4A6PESYFNTRGQQB","created_at":"2026-07-05T09:23:51Z"},{"alias_kind":"pith_short_8","alias_value":"U4A6PESY","created_at":"2026-07-05T09:23:51Z"}],"graph_snapshots":[{"event_id":"sha256:47f8260a41cd4dfe6e1a30c0184f4065bfc22c8f3b68b22397da7ec4ffac0e40","target":"graph","created_at":"2026-07-05T09:23:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20455/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the era of Large Language Models (LLMs) with their advanced capabilities, a unique opportunity arises to develop LLM-based digital assistant tools that can support software developers by facilitating comprehensive reasoning about software dependencies and open-source libraries before importing them. This reasoning process is daunting, mandating multiple specialized tools and dedicated expertise, each focusing on distinct aspects (e.g., security analysis tools may overlook design flaws such as circular dependencies, which hinder software maintainability). Creating a significant bottleneck in","authors_text":"Mohannad Alhanahnah, Yazan Boshmaf","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-05-30T20:05:44Z","title":"DepsRAG: Towards Agentic Reasoning and Planning for Software Dependency Management"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20455","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:91224037f72b0ca5738e6d818462d0da62bd20cf5901f2189fec043d4846c87d","target":"record","created_at":"2026-07-05T09:23:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8df265f1980cef710ffc23472667c8c6ef4c955dd5a990b65957d11838c39274","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-05-30T20:05:44Z","title_canon_sha256":"5ee5915de0a4eb7f5428a5e220eba60a5664a089457de596efd61ef55a0c3a84"},"schema_version":"1.0","source":{"id":"2405.20455","kind":"arxiv","version":5}},"canonical_sha256":"a701e792582b6713420145b63d41bc5f54dd8786a901c1ed9ecebbcbe9e5329a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a701e792582b6713420145b63d41bc5f54dd8786a901c1ed9ecebbcbe9e5329a","first_computed_at":"2026-07-05T09:23:51.006562Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:23:51.006562Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"edttpfiNxP99sc9aWLO/W8xL6GmcWa27z7ICTmQPcT7vLpU7m2AF3Obd7JY/BEx9VyqA2jPXHq/GhC+b8z9LAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:23:51.007061Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20455","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:91224037f72b0ca5738e6d818462d0da62bd20cf5901f2189fec043d4846c87d","sha256:47f8260a41cd4dfe6e1a30c0184f4065bfc22c8f3b68b22397da7ec4ffac0e40"],"state_sha256":"23538a4af69f79fd331ec003e9a87ddc467c4792ee9841c44697e490d5c5b90e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s8uD8qGg88RZR7DahUPvKkcNWbLzTC0o61ohQSME5l8DitBxNPOlfxzuiwXU3pE0s7dj6PlP7eMLuff1saZtDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T17:58:40.685584Z","bundle_sha256":"c607d82d68abd3b5815ff3ebe2d9e2a93339ab45579420c5a7ffc7b7bb47be7b"}}