Chainguard is strengthening software supply chains by expanding its secure repository of Java, JavaScript, and Python libraries.

DevOps publication provides insights into DevOps practices, tools, and culture, offering articles and tutorials for automating software delivery pipelines and fostering collaboration between development and operations teams. By exploring DevOps's curated content, developers can learn about infrastructure as code (IaC), containerization, and cloud-native technologies for building scalable and resilient applications. DevOps publication offers  guidance and best practices to accelerate your software delivery process and improve team collaboration.

DevOps.com

Chainguard has expanded its repository of secure open source libraries to include Java and JavaScript components, alongside a generally available expanded Python library set. The company has rebuilt nearly one million unique Java dependency versions—including Spring Boot, Log4j, and Apache Commons—and covers 88% of the top 500 JavaScript libraries and 94% of common Python dependencies. All artifacts adhere to SLSA Level 2 standards as defined by the Open Source Security Foundation. The approach uses AI-augmented developers to continuously monitor and rebuild libraries, removing the burden from individual developers to vet millions of open source packages. With over 450,000 malicious packages discovered in the past year, Chainguard positions its paid repository as a way to address supply chain security at the dependency layer rather than at the perimeter.

Chainguard Expands Repository to Add More Secure Open Source Libraries