​This week we are reading:

​Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web

​https://arxiv.org/pdf/2512.15447

​Community guidelines:

• ​Everyone is welcome, no matter your background.

• ​Prepare: Please read the paper ahead of time

• ​Student-mindset: Come prepared with questions. No question is too simple. If it doesn’t make sense to you, high chance someone else feels the same way. We are all here to learn!

• ​Participate: learning is a full contact sport. Not for spectators

• ​Positivity: when you read enough papers, it becomes too easy to trash research. Take constructive criticism and recast it as an opportunity! Things will look messy at the bleeding edge