{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:YQJ66GBJFAFCRHL5LRW4K3FHLL","short_pith_number":"pith:YQJ66GBJ","canonical_record":{"source":{"id":"2409.15674","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-24T02:26:48Z","cross_cats_sorted":[],"title_canon_sha256":"ff4b086315cdeef4b87d98d4ea0391e2d53a3e2e67e2cc4c83878e4ce2352036","abstract_canon_sha256":"e4c58715971ec8b37778d42fd848d5d44fad9b5dfd63e2829d2afa0a1025ba25"},"schema_version":"1.0"},"canonical_sha256":"c413ef1829280a289d7d5c6dc56ca75adac22ee744364a53f4a72959cf122b79","source":{"kind":"arxiv","id":"2409.15674","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.15674","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"arxiv_version","alias_value":"2409.15674v2","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.15674","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_12","alias_value":"YQJ66GBJFAFC","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_16","alias_value":"YQJ66GBJFAFCRHL5","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_8","alias_value":"YQJ66GBJ","created_at":"2026-07-05T09:22:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:YQJ66GBJFAFCRHL5LRW4K3FHLL","target":"record","payload":{"canonical_record":{"source":{"id":"2409.15674","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-24T02:26:48Z","cross_cats_sorted":[],"title_canon_sha256":"ff4b086315cdeef4b87d98d4ea0391e2d53a3e2e67e2cc4c83878e4ce2352036","abstract_canon_sha256":"e4c58715971ec8b37778d42fd848d5d44fad9b5dfd63e2829d2afa0a1025ba25"},"schema_version":"1.0"},"canonical_sha256":"c413ef1829280a289d7d5c6dc56ca75adac22ee744364a53f4a72959cf122b79","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:22:21.905709Z","signature_b64":"K9/PeuN4/MzeGgQw6ygyk+BJdcxg35vEmdmBXirhPV05UGJ3YnyqNoTaDKFsqFgq5Sr4fOTu1B+T74u2GuUmBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c413ef1829280a289d7d5c6dc56ca75adac22ee744364a53f4a72959cf122b79","last_reissued_at":"2026-07-05T09:22:21.905288Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:22:21.905288Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.15674","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:22:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PBPAkRojfdrQtjm/iYm4Tk4vuEsfcurPCNygkBy5DrpXrbROex+F7te9VNHwgOkdS1EtkFF0xPTcUMSwNpiqBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:13:13.191575Z"},"content_sha256":"d99d31605bf95c5f3b1c7117d39c81ccddfae98563b5e4d02023c90c4917159d","schema_version":"1.0","event_id":"sha256:d99d31605bf95c5f3b1c7117d39c81ccddfae98563b5e4d02023c90c4917159d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:YQJ66GBJFAFCRHL5LRW4K3FHLL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Developer Reactions to Protestware in Open Source Software: The cases of color.js and es5.ext","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Christoph Treude, Dong Wang, Hathaichanok Damrongsiri, Hideaki Hata, Raula Gaikovina Kula, Supatsara Wattanakriengkrai, Youmei Fan","submitted_at":"2024-09-24T02:26:48Z","abstract_excerpt":"There is growing concern about maintainers self-sabotaging their work in order to take political or economic stances, a practice referred to as \"protestware\". Our objective is to understand the discourse around discussions on such an attack, how it is received by the community, and whether developers respond to the attack in a timely manner. We study two notable protestware cases i.e., colors.js and es5-ext. Results indicate that protestware discussions are spread more quickly on the GitHub platform, while security vulnerabilities are faster on social media. By establishing a taxonomy of prote"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.15674","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.15674/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:22:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UAHjn8ehW3eN7LKdXPji2HG1IL65+CWGlBBw5MncZt1MTiN+Q5361V2luRGQ9Pgbv9SiiO8YcCE0+yEBeDpeAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:13:13.191985Z"},"content_sha256":"a2331fbab2964d5d739d87def81f4bb767e3c5feb86c3d7d79f3c342420730c8","schema_version":"1.0","event_id":"sha256:a2331fbab2964d5d739d87def81f4bb767e3c5feb86c3d7d79f3c342420730c8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/bundle.json","state_url":"https://pith.science/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T04:13:13Z","links":{"resolver":"https://pith.science/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL","bundle":"https://pith.science/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/bundle.json","state":"https://pith.science/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YQJ66GBJFAFCRHL5LRW4K3FHLL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YQJ66GBJFAFCRHL5LRW4K3FHLL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4c58715971ec8b37778d42fd848d5d44fad9b5dfd63e2829d2afa0a1025ba25","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-24T02:26:48Z","title_canon_sha256":"ff4b086315cdeef4b87d98d4ea0391e2d53a3e2e67e2cc4c83878e4ce2352036"},"schema_version":"1.0","source":{"id":"2409.15674","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.15674","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"arxiv_version","alias_value":"2409.15674v2","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.15674","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_12","alias_value":"YQJ66GBJFAFC","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_16","alias_value":"YQJ66GBJFAFCRHL5","created_at":"2026-07-05T09:22:21Z"},{"alias_kind":"pith_short_8","alias_value":"YQJ66GBJ","created_at":"2026-07-05T09:22:21Z"}],"graph_snapshots":[{"event_id":"sha256:a2331fbab2964d5d739d87def81f4bb767e3c5feb86c3d7d79f3c342420730c8","target":"graph","created_at":"2026-07-05T09:22:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.15674/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"There is growing concern about maintainers self-sabotaging their work in order to take political or economic stances, a practice referred to as \"protestware\". Our objective is to understand the discourse around discussions on such an attack, how it is received by the community, and whether developers respond to the attack in a timely manner. We study two notable protestware cases i.e., colors.js and es5-ext. Results indicate that protestware discussions are spread more quickly on the GitHub platform, while security vulnerabilities are faster on social media. By establishing a taxonomy of prote","authors_text":"Christoph Treude, Dong Wang, Hathaichanok Damrongsiri, Hideaki Hata, Raula Gaikovina Kula, Supatsara Wattanakriengkrai, Youmei Fan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-24T02:26:48Z","title":"Developer Reactions to Protestware in Open Source Software: The cases of color.js and es5.ext"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.15674","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d99d31605bf95c5f3b1c7117d39c81ccddfae98563b5e4d02023c90c4917159d","target":"record","created_at":"2026-07-05T09:22:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4c58715971ec8b37778d42fd848d5d44fad9b5dfd63e2829d2afa0a1025ba25","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-09-24T02:26:48Z","title_canon_sha256":"ff4b086315cdeef4b87d98d4ea0391e2d53a3e2e67e2cc4c83878e4ce2352036"},"schema_version":"1.0","source":{"id":"2409.15674","kind":"arxiv","version":2}},"canonical_sha256":"c413ef1829280a289d7d5c6dc56ca75adac22ee744364a53f4a72959cf122b79","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c413ef1829280a289d7d5c6dc56ca75adac22ee744364a53f4a72959cf122b79","first_computed_at":"2026-07-05T09:22:21.905288Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:22:21.905288Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K9/PeuN4/MzeGgQw6ygyk+BJdcxg35vEmdmBXirhPV05UGJ3YnyqNoTaDKFsqFgq5Sr4fOTu1B+T74u2GuUmBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:22:21.905709Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.15674","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d99d31605bf95c5f3b1c7117d39c81ccddfae98563b5e4d02023c90c4917159d","sha256:a2331fbab2964d5d739d87def81f4bb767e3c5feb86c3d7d79f3c342420730c8"],"state_sha256":"21970bcffef631387de6443b6da3683389c3c0af1e63d1a3557961db76bcdf0b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yywdfX1j3elV+T3ECt0wuC6qGJh3Yg0owWiI7smGLKxIe7c1L5t2YSdrI1V35t2xtKkupb5AJ88yoeX9gvuZAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T04:13:13.196228Z","bundle_sha256":"eb28a6f19ec077d59a89286e05465d45d63392fa646b44753a4d73be29a18efc"}}