Internship study accepted at ISE 2025

A study by Chayanid Termphaiboon from a research internship at NAIST was accepted at the International Workshop on Intelligent Software Engineering (ISE 2025), co-located with ASE 2025. It compared Python projects on PyPI with and without a SECURITY.md file to see how security policies relate to dependency management. Projects with a security policy tend to rely on a broader set of direct dependencies, while the depth of their dependency chains is similar. Projects created after SECURITY.md was introduced, especially later adopters, update their dependencies more often. The results suggest that security policies go with more modular projects and more proactive dependency management.

Raula Gaikovina Kula, Youmei Fan, Morakot Choetkiertikul, Chaiyong Ragkhitwetsagul, Thanwadee Sunetnanta, and Kenichi Matsumoto co-supervised Chayanid. The study later grew into DepSecLens, which received an Honorable Mention at NSC 2026.