Follow our project on LinkedIn !
We are delighted to announce that Maryam is joining the project as a Postdoctoral Fellow. Maryam brings strong static analysis and software testing expertise. We look forward to welcoming Maryam.
We are delighted to announce that Timothee is joining our project team as a Postdoctoral Fellow in Wellington. Timothee has a PhD from the University of Luxemburg, and has worked in static and dynamic program analysis, including vulnerability detection.
Jens will give a talk at Deloitte about software supply chain security in Wellington, organised by Joanne Lu.
Please contact us if you are interested for us to give a talk at your organisation on the state and challenges in Software Supply Chain security !
This is our first in-person meeting in Wellington in 2026 ! Several advisory board members are attending as well. We have a set of technical talks scheduled:

Jens will give a talk at RMIT in Melbourne about software supply chain security.
Jens has received a gift of USD 78k / NZD 130k from Oracle Inc to continue the work with Behnaz Hassanshahi on build security, including the ongoing development of daleq. This work is complementary to scc-fort, and will initially focus on python builds.
Valerio and Jens are invited speakers at the Australian Summer School in Software Engineering OzSE’26 in Melbourne, focussing on AI in Software Engineering. Jens will talk about software supply chain issues, Valerio about metamorphic testing of LLMs.
We are delighted to announce that Shawn is joining the project. Shawn holds a PhD from Massey University, supervised by Jens and Amjed Tahir on deserialization vulnerabilities. This led to the discovery of several new vulnerabilities including CVE-2019-17063 (PDFxStream), CVE-2019-20446 (librvg), CVE-2018-11797 (PDFBox) and CVE-2018-19478 (GhostScript). Welcome on board Shawn !
We are delighted to announce that Tony is joining the project in March as pur project manager. Tony is already working for the School of Engineering and Computer Science at Victoria University of Wellington and has worked with many of us already.
Kelly Blincoe is attending a workshop at the Lorentz Center in The Netherlands on the topic of Rethinking Software Ecosystems. She has been invited to give a keynote, titled Beyond the Dependency Graph: Human Factors, Power, and Equity in Software Ecosystems.
The team will meet in Auckland to discuss ongoing work and plan ahead.
Valerio and Jens will give talks at the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE’25) in Seoul, Korea. ASE’25 is one of the 3 top-rated conferences in Software Engineering. Jens will talk about daleq, a tool to assess rebuilds, Valerio will talk about Oracles to test LLMs.
We are excited to announce that our first postdoc, Dr. Lisa Patterson, is joining our team on 1 Nov. Lisa has extensive experience working in the private sector and working with government. Lisa holds a Phd in Cybersecurity from Victoria University of Wellington. Welcome on board Lisa !
The team is meeting for our project kick-off meeting in Wellington.
After two days of planning we went to a local soviet-themed escape room for team building :-) .

The project will start on 1 October 2025 !