Add PROFES2025 article #270

kanaji2002 · 2025-12-09T14:50:26Z

No description provided.

Mont9165 · 2025-12-10T05:24:31Z

content/ja/post/profes2025/index.md

+その結果，マニフェストは1つの主要見出しと複数のサブセクションから成る浅い階層構造を持ち，内容の多くが運用コマンド，技術的な実装メモ，高レベルアーキテクチャの説明に集中していることが分かりました．
+
+
+Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．


ここだけ空白入ってる？

Tonnam さん

Mont9165 · 2025-12-10T05:25:12Z

content/ja/post/profes2025/index.md

+
+
+金地くんは “An Empirical Study of Security-Policy Related Issues in Open Source Projects” というタイトルで発表しました．
+本研究では，GitHub リポジトリ内で脆弱性を報告するためのファイルである，SECURITY.mdに着目し，その普及率が低い理由を調査しました．具体的には，SECURITY.mdファイルと5種類のコミュニティヘルスファイルに関連するIssueを分析し，導入が進まない要因を明らかにしました．その結果、SECURITY.mdの導入がかえってコントリビューターを混乱させているケースが存在することが確認されました．


ここも空白，意図して入れてるなら無視してオッケー

Mont9165 · 2025-12-10T05:25:38Z

content/ja/post/profes2025/index.md

+
+
+Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．
+本研究では，最小限の機能しか持たない trivial packages と，実行可能なロジックを含まない data-only packages を対象に，それらの普及状況とセキュリティリスクを調査しています．発表では，これらのパッケージを検出するための規則ベース静的解析手法を開発し，2025年時点の npm エコシステムにおけるリスク評価を行いました．


英語の前と後ろには意図的に空白入れてる？

Mont9165 · 2025-12-10T05:28:56Z

content/en/post/profes2025/index.md

+Kanaji from our laboratory, along with Amy and Tonnam from Kasetsart University, presented their research at the [26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025), which was held from December 1 to 3, 2025.
+
+
+Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”


Mr. Kanajiとか敬称をつけていたはず (Amy, Tonnamも同じく

Mont9165 · 2025-12-10T05:29:22Z

content/en/post/profes2025/index.md

+---
+# Documentation: https://wowchemy.com/docs/managing-content/
+
+title: "Kanaji, Amy, and Tonnam presented their research at PROFES 2025."


ここも敬称つけた方が良さそう

Mont9165 · 2025-12-10T05:30:13Z

content/ja/post/profes2025/index.md

+---
+![](IMG_Kanaji.png)
+
+本研究室の金地君と，Kasetsart UniversityのAmyさん，Tonnamさんが，2025年12月1日~3日にかけて行われた[26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025)で発表を行いました．


どこで開催されたか，あとは採択率とかも情報があれば書いてもいいかも？これは必須じゃない

Copilot

Pull request overview

This PR adds a bilingual blog post (Japanese and English) announcing research presentations by three lab members at PROFES 2025, which took place December 1-3, 2025. The article follows the established structure for conference announcement posts in this academic website repository.

Introduces presentations from Kanaji (lab member), Amy, and Tonnam (both from Kasetsart University)
Covers three research topics: security policies in open source, agentic coding manifests, and low-functionality NPM packages
Includes presentation photos for all three presenters

Reviewed changes

Copilot reviewed 2 out of 8 changed files in this pull request and generated 2 comments.

File	Description
content/en/post/profes2025/index.md	English version of the PROFES 2025 conference announcement with detailed summaries of three research presentations
content/ja/post/profes2025/index.md	Japanese version of the same conference announcement, maintaining parallel structure and content

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2025-12-10T05:34:41Z

content/en/post/profes2025/index.md

+
+
+Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”
+This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, we analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.


Inconsistent point of view: The text uses "we analyzed" (first person) while the rest of the article uses third person narrative (e.g., "This study focuses", "The results revealed"). Consider changing to "the study analyzed" or "this research analyzed" to maintain consistency with the third-person perspective used throughout the article.

Suggested change

This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, we analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.

This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, the study analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.

これは文法とかの問題なので対応した方が良さそう

Copilot · 2025-12-10T05:34:42Z

content/ja/post/profes2025/index.md

+その結果，マニフェストは1つの主要見出しと複数のサブセクションから成る浅い階層構造を持ち，内容の多くが運用コマンド，技術的な実装メモ，高レベルアーキテクチャの説明に集中していることが分かりました．
+
+
+Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．
+本研究では，最小限の機能しか持たない trivial packages と，実行可能なロジックを含まない data-only packages を対象に，それらの普及状況とセキュリティリスクを調査しています．発表では，これらのパッケージを検出するための規則ベース静的解析手法を開発し，2025年時点の npm エコシステムにおけるリスク評価を行いました．
+分析の結果，パッケージの 17.92%が trivial packages に分類され，その脆弱性レベルは非 trivial パッケージと同程度であることが示されました。また，data-only packages は頻度こそ低いものの，依然としてリスクを含むことも確認されました。提案手法による検出ツールは94%の精度（macro-F1 0.87）を達成し，大規模解析やセキュリティリスク低減に有用であることが示されました．


Inconsistent punctuation usage: The text mixes Japanese commas (、) and Western-style commas (，), as well as Japanese periods (。) and Western-style periods (．). For example, line 36 uses both "，" and "、", while line 46 uses "。" instead of "．". Consider using consistent punctuation throughout the document - either all Japanese-style (、。) or all Western-style (，．) punctuation marks.

Suggested change

その結果，マニフェストは1つの主要見出しと複数のサブセクションから成る浅い階層構造を持ち，内容の多くが運用コマンド，技術的な実装メモ，高レベルアーキテクチャの説明に集中していることが分かりました．

Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．

本研究では，最小限の機能しか持たない trivial packages と，実行可能なロジックを含まない data-only packages を対象に，それらの普及状況とセキュリティリスクを調査しています．発表では，これらのパッケージを検出するための規則ベース静的解析手法を開発し，2025年時点の npm エコシステムにおけるリスク評価を行いました．

分析の結果，パッケージの 17.92%が trivial packages に分類され，その脆弱性レベルは非 trivial パッケージと同程度であることが示されました。また，data-only packages は頻度こそ低いものの，依然としてリスクを含むことも確認されました。提案手法による検出ツールは94%の精度（macro-F1 0.87）を達成し，大規模解析やセキュリティリスク低減に有用であることが示されました．

その結果、マニフェストは1つの主要見出しと複数のサブセクションから成る浅い階層構造を持ち、内容の多くが運用コマンド、技術的な実装メモ、高レベルアーキテクチャの説明に集中していることが分かりました。

Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました。

本研究では、最小限の機能しか持たない trivial packages と、実行可能なロジックを含まない data-only packages を対象に、それらの普及状況とセキュリティリスクを調査しています。発表では、これらのパッケージを検出するための規則ベース静的解析手法を開発し、2025年時点の npm エコシステムにおけるリスク評価を行いました。

分析の結果、パッケージの 17.92%が trivial packages に分類され、その脆弱性レベルは非 trivial パッケージと同程度であることが示されました。また、data-only packages は頻度こそ低いものの、依然としてリスクを含むことも確認されました。提案手法による検出ツールは94%の精度（macro-F1 0.87）を達成し、大規模解析やセキュリティリスク低減に有用であることが示されました。

これは無視

Copilot

Pull request overview

Copilot reviewed 2 out of 8 changed files in this pull request and generated 6 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

content/en/post/profes2025/index.md

content/ja/post/profes2025/index.md

Copilot · 2025-12-12T07:56:23Z

content/en/post/profes2025/index.md

+This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, the study analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.
+
+
+Ms.Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."


Inconsistent spacing: There should be a space after "Ms." in "Ms.Amy" for consistency with the formatting elsewhere in the document where "Ms.Tonnam" appears. This should be "Ms. Amy" to match standard English spacing conventions.

Suggested change

Ms.Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."

Ms. Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."

Copilot · 2025-12-12T07:56:23Z

content/en/post/profes2025/index.md

+projects: []
+---
+![](IMG_Kanaji.png)
+Mr.Kanaji from our laboratory, along with Amy and Tonnam from Kasetsart University, attended the [26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025), which was held in Salerno, Italy, from December 1 to 3, 2025. The three authors submitted their papers to the short paper track of PROFES, where their work was accepted and presented. The acceptance rate for the short papers was 68%.


Inconsistent spacing: "Mr.Kanaji" should have a space after the period to match standard English spacing conventions. This should be "Mr. Kanaji" for consistency with the title format.

Copilot · 2025-12-12T07:56:24Z

content/en/post/profes2025/index.md

+Mr.Kanaji from our laboratory, along with Amy and Tonnam from Kasetsart University, attended the [26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025), which was held in Salerno, Italy, from December 1 to 3, 2025. The three authors submitted their papers to the short paper track of PROFES, where their work was accepted and presented. The acceptance rate for the short papers was 68%.
+
+
+Mr.Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”


Inconsistent spacing: "Mr.Kanaji" should have a space after the period to match standard English spacing conventions. This should be "Mr. Kanaji".

Suggested change

Mr.Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”

Mr. Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”

Co-authored-by: Copilot <[email protected]>

Add PROFES2025 article

459ff06

kanaji2002 assigned Mont9165 and kanaji2002 Dec 9, 2025

fixed image name

fa7d6a4

Mont9165 requested changes Dec 10, 2025

View reviewed changes

Mont9165 requested a review from Copilot December 10, 2025 05:30

Copilot started reviewing on behalf of Mont9165 December 10, 2025 05:31 View session

Copilot AI reviewed Dec 10, 2025

View reviewed changes

kanaji2002 added 3 commits December 11, 2025 21:56

Fixed after Horikawa-san review

d1694f9

Typo

f1251ad

アクセプトされた -> 採択された

711b592

Mont9165 requested a review from Copilot December 12, 2025 07:52

Copilot started reviewing on behalf of Mont9165 December 12, 2025 07:52 View session

Copilot AI reviewed Dec 12, 2025

View reviewed changes

Mont9165 and others added 4 commits December 12, 2025 18:00

Update content/en/post/profes2025/index.md

227b86d

Co-authored-by: Copilot <[email protected]>

Update content/en/post/profes2025/index.md

57c17a9

Co-authored-by: Copilot <[email protected]>

Update content/ja/post/profes2025/index.md

9288d0f

Co-authored-by: Copilot <[email protected]>

敬称の修正

4ce8275

kanaji2002 requested a review from Mont9165 December 12, 2025 09:54

		その結果，マニフェストは1つの主要見出しと複数のサブセクションから成る浅い階層構造を持ち，内容の多くが運用コマンド，技術的な実装メモ，高レベルアーキテクチャの説明に集中していることが分かりました．


		Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．



		金地くんは “An Empirical Study of Security-Policy Related Issues in Open Source Projects” というタイトルで発表しました．
		本研究では，GitHub リポジトリ内で脆弱性を報告するためのファイルである，SECURITY.mdに着目し，その普及率が低い理由を調査しました．具体的には，SECURITY.mdファイルと5種類のコミュニティヘルスファイルに関連するIssueを分析し，導入が進まない要因を明らかにしました．その結果、SECURITY.mdの導入がかえってコントリビューターを混乱させているケースが存在することが確認されました．



		Tonnam さんは "Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem" というタイトルで発表しました．
		本研究では，最小限の機能しか持たない trivial packages と，実行可能なロジックを含まない data-only packages を対象に，それらの普及状況とセキュリティリスクを調査しています．発表では，これらのパッケージを検出するための規則ベース静的解析手法を開発し，2025年時点の npm エコシステムにおけるリスク評価を行いました．

		Kanaji from our laboratory, along with Amy and Tonnam from Kasetsart University, presented their research at the [26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025), which was held from December 1 to 3, 2025.


		Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”



		Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”
		This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, we analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.

		This study focuses on SECURITY.md, a file used to report vulnerabilities in GitHub repositories, and investigates the reasons behind its low adoption rate. Specifically, the study analyzed Issues related to SECURITY.md and five other community health files to identify the factors that hinder its adoption. The results revealed that, in some cases, the introduction of SECURITY.md can instead cause confusion among contributors.


		Ms.Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."

	Ms.Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."
	Ms. Amy presented her work titled "On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code."

		Mr.Kanaji from our laboratory, along with Amy and Tonnam from Kasetsart University, attended the [26th International Conference on Product-Focused Software Process Improvement (PROFES 2025)](https://conf.researchr.org/home/profes-2025), which was held in Salerno, Italy, from December 1 to 3, 2025. The three authors submitted their papers to the short paper track of PROFES, where their work was accepted and presented. The acceptance rate for the short papers was 68%.


		Mr.Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”

	Mr.Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”
	Mr. Kanaji presented his work titled “An Empirical Study of Security-Policy Related Issues in Open Source Projects.”

Add PROFES2025 article #270

Are you sure you want to change the base?

Add PROFES2025 article #270

Uh oh!

Conversation

kanaji2002 commented Dec 9, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Copilot AI Dec 10, 2025

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants