Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security. - Jan-Ulrich Holtgrave; Kay Friedrich; Fabian Fischer 009; Nicolas Huaman; Niklas Busch; Jan H. Klemmer; Marcel Fourné; Oliver Wiese; Dominik Wermke; Sascha Fahl (NDSS, 2025)

"I'm Pretty Expert and I Still Screw It Up": Qualitative Insights into Experiences and Challenges of Designing and Implementing Cryptographic Library APIs. - Juliane Schmüser; Philip Klostermeyer; Kay Friedrich; Sascha Fahl (SP, 2025)