{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XMAXB6CY5B2KFRWM3MNY475MBB","short_pith_number":"pith:XMAXB6CY","canonical_record":{"source":{"id":"2310.02059","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"611e7cd188516d0b67a4f479d3fb580ae39208064e4eb7eb89b72c07dea22f7d","abstract_canon_sha256":"6ca2217cb610d7b07f5a208c5dbbcca751e899d8de22568f0fca4fb3702c8205"},"schema_version":"1.0"},"canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","source":{"kind":"arxiv","id":"2310.02059","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.02059","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"arxiv_version","alias_value":"2310.02059v4","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.02059","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_12","alias_value":"XMAXB6CY5B2K","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_16","alias_value":"XMAXB6CY5B2KFRWM","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_8","alias_value":"XMAXB6CY","created_at":"2026-07-05T10:10:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XMAXB6CY5B2KFRWM3MNY475MBB","target":"record","payload":{"canonical_record":{"source":{"id":"2310.02059","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"611e7cd188516d0b67a4f479d3fb580ae39208064e4eb7eb89b72c07dea22f7d","abstract_canon_sha256":"6ca2217cb610d7b07f5a208c5dbbcca751e899d8de22568f0fca4fb3702c8205"},"schema_version":"1.0"},"canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:21.890643Z","signature_b64":"tAkTj0SKhqZ0zbfpQwXwrxbvQAp2sQ2JQ+piLSFTMT2GsWawANGZt3GzsgjdRvmT8VmSEuKZqjUdDqnNWeuGCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","last_reissued_at":"2026-07-05T10:10:21.890170Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:21.890170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.02059","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YSaq42fE85+xDVsNEg7hMMRzhdCzP5xNQCybj3pauQuL7xw7I8VLXhT9Ta5XUIZ3OH16q+v5wG6fIGy522DWCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T04:32:16.407902Z"},"content_sha256":"01766da9da1bdd6be534559aaf82b7adbf500f7641629cfc1e138feeb0df7024","schema_version":"1.0","event_id":"sha256:01766da9da1bdd6be534559aaf82b7adbf500f7641629cfc1e138feeb0df7024"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XMAXB6CY5B2KFRWM3MNY475MBB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Amjed Tahir, Jiaxin Yu, Jinfu Chen, Mojtaba Shahin, Peng Liang, Yujia Fu, Zengyang Li","submitted_at":"2023-10-03T14:01:28Z","abstract_excerpt":"Modern code generation tools utilizing AI models like Large Language Models (LLMs) have gained increased popularity due to their ability to produce functional code. However, their usage presents security challenges, often resulting in insecure code merging into the code base. Thus, evaluating the quality of generated code, especially its security, is crucial. While prior research explored various aspects of code generation, the focus on security has been limited, mostly examining code produced in controlled environments rather than open source development scenarios. To address this gap, we con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.02059","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.02059/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5bQmok+W9y2hSYr7m0GVXfEGaYwY5ke4BfNhQGKmrfAw+Z6E8+jqq31TGWt65Fqur/55OaOnaWRSemIGHsHYAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T04:32:16.408276Z"},"content_sha256":"c0e08738c4f2fd9bfec72da39c27d2ba46346179127c07af3d1c5de0f45c3f8b","schema_version":"1.0","event_id":"sha256:c0e08738c4f2fd9bfec72da39c27d2ba46346179127c07af3d1c5de0f45c3f8b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/bundle.json","state_url":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XMAXB6CY5B2KFRWM3MNY475MBB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T04:32:16Z","links":{"resolver":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB","bundle":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/bundle.json","state":"https://pith.science/pith/XMAXB6CY5B2KFRWM3MNY475MBB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XMAXB6CY5B2KFRWM3MNY475MBB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XMAXB6CY5B2KFRWM3MNY475MBB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6ca2217cb610d7b07f5a208c5dbbcca751e899d8de22568f0fca4fb3702c8205","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","title_canon_sha256":"611e7cd188516d0b67a4f479d3fb580ae39208064e4eb7eb89b72c07dea22f7d"},"schema_version":"1.0","source":{"id":"2310.02059","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.02059","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"arxiv_version","alias_value":"2310.02059v4","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.02059","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_12","alias_value":"XMAXB6CY5B2K","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_16","alias_value":"XMAXB6CY5B2KFRWM","created_at":"2026-07-05T10:10:21Z"},{"alias_kind":"pith_short_8","alias_value":"XMAXB6CY","created_at":"2026-07-05T10:10:21Z"}],"graph_snapshots":[{"event_id":"sha256:c0e08738c4f2fd9bfec72da39c27d2ba46346179127c07af3d1c5de0f45c3f8b","target":"graph","created_at":"2026-07-05T10:10:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.02059/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern code generation tools utilizing AI models like Large Language Models (LLMs) have gained increased popularity due to their ability to produce functional code. However, their usage presents security challenges, often resulting in insecure code merging into the code base. Thus, evaluating the quality of generated code, especially its security, is crucial. While prior research explored various aspects of code generation, the focus on security has been limited, mostly examining code produced in controlled environments rather than open source development scenarios. To address this gap, we con","authors_text":"Amjed Tahir, Jiaxin Yu, Jinfu Chen, Mojtaba Shahin, Peng Liang, Yujia Fu, Zengyang Li","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","title":"Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.02059","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:01766da9da1bdd6be534559aaf82b7adbf500f7641629cfc1e138feeb0df7024","target":"record","created_at":"2026-07-05T10:10:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6ca2217cb610d7b07f5a208c5dbbcca751e899d8de22568f0fca4fb3702c8205","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-10-03T14:01:28Z","title_canon_sha256":"611e7cd188516d0b67a4f479d3fb580ae39208064e4eb7eb89b72c07dea22f7d"},"schema_version":"1.0","source":{"id":"2310.02059","kind":"arxiv","version":4}},"canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb0170f858e874a2c6ccdb1b8e7fac0851adb41b2e8e7a2d1bdf281a3b8e339e","first_computed_at":"2026-07-05T10:10:21.890170Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:10:21.890170Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tAkTj0SKhqZ0zbfpQwXwrxbvQAp2sQ2JQ+piLSFTMT2GsWawANGZt3GzsgjdRvmT8VmSEuKZqjUdDqnNWeuGCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:10:21.890643Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.02059","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:01766da9da1bdd6be534559aaf82b7adbf500f7641629cfc1e138feeb0df7024","sha256:c0e08738c4f2fd9bfec72da39c27d2ba46346179127c07af3d1c5de0f45c3f8b"],"state_sha256":"aa711aff1eef6aa90b7a491bc75ea38208cd09430621e505716cde43ee45330a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RMM/g9/rmMqHTPmUknxeD1K6fKkraVrfIu9aBFU6yNXvsP3u+mGysy/+Xa4WU1cWepmgqbLOg070IBmMYVxmAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T04:32:16.410727Z","bundle_sha256":"5a4ee50428183095dbb50b5d57034b14e663405b5c8d2d4585ce1b25e8797dee"}}