{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YLOL5DVFGFA3R7YDOV46HUREUI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11"},"schema_version":"1.0","source":{"id":"2501.02170","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"arxiv_version","alias_value":"2501.02170v1","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.02170","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_12","alias_value":"YLOL5DVFGFA3","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_16","alias_value":"YLOL5DVFGFA3R7YD","created_at":"2026-07-05T09:57:03Z"},{"alias_kind":"pith_short_8","alias_value":"YLOL5DVF","created_at":"2026-07-05T09:57:03Z"}],"graph_snapshots":[{"event_id":"sha256:422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c","target":"graph","created_at":"2026-07-05T09:57:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.02170/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Developers are sharing pre-trained Machine Learning (ML) models through a variety of model sharing platforms, such as Hugging Face, in an effort to make ML development more collaborative. To share the models, they must first be serialized. While there are many methods of serialization in Python, most of them are unsafe. To tame this insecurity, Hugging Face released safetensors as a way to mitigate the threats posed by unsafe serialization formats. In this context, this paper investigates developer's shifts towards using safetensors on Hugging Face in an effort to understand security practices","authors_text":"Andrew Cotaj, Beatrice Casey, Joanna C. S. Santos, Kaia Damian","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title":"An Empirical Study of Safetensors' Usage Trends and Developers' Perceptions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.02170","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1","target":"record","created_at":"2026-07-05T09:57:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"11c65c7d09c71eb84cdaf263bba24a7a0670a1e87cf9dcaeee4c13a875cbebe0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-01-04T03:04:56Z","title_canon_sha256":"b589d51b8baf107edadaaf21b9d4a5b09770e47ac98060604f8d75fa24d70a11"},"schema_version":"1.0","source":{"id":"2501.02170","kind":"arxiv","version":1}},"canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2dcbe8ea53141b8ff037579e3d224a2006c472056e80b89c7be43cfb59ecb84","first_computed_at":"2026-07-05T09:57:03.285925Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:57:03.285925Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SarkvLBA4QeZAet8xN6TcnUFFkfJNx8Xc8gxTOBGBrb8dB5BS4ipcdR5MMcoM781hEmelahF52Rurfs3dPHeCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:57:03.286470Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.02170","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8fa9b846a4130e21819f33229cfa5ec87d18cc3dd4892a38224323da430140f1","sha256:422b512f47faba6dd1b49c867f7dd1325b2e0fecefb02bb3cbc82fb45d20254c"],"state_sha256":"8ee3e827178eaf31e60dfce356dde3b09088e75f3edad3bb330d539c296999e1"}