{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YLOL5DVFGFA3R7YDOV46HUREUI","short_pith_number":"pith:YLOL5DVF","canonical_record":{"source":{"id":"2501.02170","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","cross_cats_sorted":[],"title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11","abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0"},"schema_version":"1.0"},"canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","source":{"kind":"arxiv","id":"2501.02170","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02170v1","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_12","alias_value":"YLOL5DVFGFA3","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_16","alias_value":"YLOL5DVFGFA3R7YD","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_8","alias_value":"YLOL5DVF","created_at":"2026-07-05T09:57:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YLOL5DVFGFA3R7YDOV46HUREUI","target":"record","payload":{"canonical_record":{"source":{"id":"2501.02170","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","cross_cats_sorted":[],"title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11","abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0"},"schema_version":"1.0"},"canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:57:03.286470Z","signature_b64":"SarkvLBA4QeZAet8xN6TcnUFFkfJNx8Xc8gxTOBGBrb8dB5BS4ipcdR5MMcoM781hEmelahF52Rurfs3dPHeCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","last_reissued_at":"2026-07-05T09:57:03.285925Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:57:03.285925Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.02170","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bZeJ3Hrel38LH5IYgJZT0JIvVtzlVixvtm3ejOpLyqFobB65j1J00QH8f9Jh1Ed6+TkDb1Tv1Kb0mf7F9hVtDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:45:58.197074Z"},"content_sha256":"8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1","schema_version":"1.0","event_id":"sha256:8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YLOL5DVFGFA3R7YDOV46HUREUI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Empirical Study of Safetensors' Usage Trends and Developers' Perceptions","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Andrew Cotaj, Beatrice Casey, Joanna C. S. Santos, Kaia Damian","submitted_at":"2025-01-04T03:04:56Z","abstract_excerpt":"Developers are sharing pre-trained Machine Learning (ML) models through a variety of model sharing platforms, such as Hugging Face, in an effort to make ML development more collaborative. To share the models, they must first be serialized. While there are many methods of serialization in Python, most of them are unsafe. To tame this insecurity, Hugging Face released safetensors as a way to mitigate the threats posed by unsafe serialization formats. In this context, this paper investigates developer's shifts towards using safetensors on Hugging Face in an effort to understand security practices"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02170","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.02170/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:57:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"on+Q5t33ENBf2LTslFf7Jc3V6AjOc5da7p58lSM6v1oMS2h9clhGuAv+zit3jD88w5Rlzr0f2qx4QcUJd3nxDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:45:58.197581Z"},"content_sha256":"422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c","schema_version":"1.0","event_id":"sha256:422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YLOL5DVFGFA3R7YDOV46HUREUI/bundle.json","state_url":"https://pith.science/pith/YLOL5DVFGFA3R7YDOV46HUREUI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YLOL5DVFGFA3R7YDOV46HUREUI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T09:45:58Z","links":{"resolver":"https://pith.science/pith/YLOL5DVFGFA3R7YDOV46HUREUI","bundle":"https://pith.science/pith/YLOL5DVFGFA3R7YDOV46HUREUI/bundle.json","state":"https://pith.science/pith/YLOL5DVFGFA3R7YDOV46HUREUI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YLOL5DVFGFA3R7YDOV46HUREUI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YLOL5DVFGFA3R7YDOV46HUREUI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11"},"schema_version":"1.0","source":{"id":"2501.02170","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02170v1","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_12","alias_value":"YLOL5DVFGFA3","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_16","alias_value":"YLOL5DVFGFA3R7YD","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_8","alias_value":"YLOL5DVF","created_at":"2026-07-05T09:57:03Z"}],"graph_snapshots":[{"event_id":"sha256:422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c","target":"graph","created_at":"2026-07-05T09:57:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.02170/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Developers are sharing pre-trained Machine Learning (ML) models through a variety of model sharing platforms, such as Hugging Face, in an effort to make ML development more collaborative. To share the models, they must first be serialized. While there are many methods of serialization in Python, most of them are unsafe. To tame this insecurity, Hugging Face released safetensors as a way to mitigate the threats posed by unsafe serialization formats. In this context, this paper investigates developer's shifts towards using safetensors on Hugging Face in an effort to understand security practices","authors_text":"Andrew Cotaj, Beatrice Casey, Joanna C. S. Santos, Kaia Damian","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title":"An Empirical Study of Safetensors' Usage Trends and Developers' Perceptions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02170","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1","target":"record","created_at":"2026-07-05T09:57:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11"},"schema_version":"1.0","source":{"id":"2501.02170","kind":"arxiv","version":1}},"canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","first_computed_at":"2026-07-05T09:57:03.285925Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:57:03.285925Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SarkvLBA4QeZAet8xN6TcnUFFkfJNx8Xc8gxTOBGBrb8dB5BS4ipcdR5MMcoM781hEmelahF52Rurfs3dPHeCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:57:03.286470Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.02170","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1","sha256:422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c"],"state_sha256":"8ee3e827178eaf31e60dfce356dde3b09088e75f3edad3bb330d539c296999e1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RNs1ltBAMXLcpua1NUi/f0cX0FywGcbbTv139Uv93VEXoh4bdWQfNfbcH7/ylZORdLSi7C7WwTnpD7+2FGF/Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T09:45:58.200523Z","bundle_sha256":"48019bd23c81ffa96ce08b818d42bc776a8eed870b09d9b7544ff30595b1c108"}}