Uploaded October 2025 | Updated September 2026, 22 hours ago
In this recording, Chainguard Sr. Principal DevRel Engineer Manfred Moser delves into the fundamental concepts behind Chainguard Libraries, discusses how to mitigate malware in the npm ecosystem using Chainguard Libraries, provides a demo of Chainguard Libraries for JavaScript, outlines the CVE remediation processes for Python libraries, and addresses questions from the audience.
Read the show notes: https://edu.chainguard.dev/software-security/learning-labs/ll202510/
Discover more about Chainguard Libraries: https://www.chainguard.dev/libraries
Check out our Chainguard Libraries documentation: https://edu.chainguard.dev/chainguard/libraries/overview/
Explore Chainguard Libraries for Python, now Generally Available: https://www.chainguard.dev/unchained/chainguard-libraries-for-python-now-generally-available-with-cve-remediation-and-malware-protection
Reach out to our team about Chainguard Libraries: https://get.chainguard.dev/chainguard-libraries-closed-beta?_gl=1*7jlfrk*_gcl_aw*R0NMLjE3NjAwMzIxODcuQ2p3S0NBand1cDNIQmhBQUVpd0E3ZXVadXNjZFR6cWNlaF9UeGw2UmR4dlMzYjMyYVNaX3N6SUE1aWZtX2RQYkhMMXVnS0xZWDJGM1ZCb0MtdWtRQXZEX0J3RQ..*_gcl_au*MTQ0NDA4OTM3MS4xNzU0MzM3MTE4
TIMESTAMPS
0:00 Introduction
1:55 Agenda
2:54 Secure container and the role of libraries
5:20 Software supply chain for libraries and security
6:51 Chainguard Libraries and the JavaScript ecosystem
14:33 Malware in the npm ecosystem
18:39 Chainguard Libraries for JavaScript
25:57 Demoes with npm and pnpm
33:50 Troubleshooting results and additional demos
41:34 Chainguard Libraries for Python
43:39 CVE remediation process and examples
52:03 Demoes with uv and grype
56:25 Further resources
57:35 Next up
58:18 Questions
1:06:00 Wrapping up
About Chainguard
Founded by the industry's leading experts on open source software, security and cloud native development, we are on a mission to be the safe source for open source.
Where to find us:
Website: https://www.chainguard.dev/
Twitter: twitter.com/chainguard_dev
LinkedIn: linkedin.com/company/chainguard-dev
TikTok: tiktok.com/@chainguard_dev
In this recording, Chainguard Sr. Principal DevRel Engineer Manfred Moser delves into the fundamental concepts behind Chainguard Libraries, discusses how to mitigate malware in the npm ecosystem using Chainguard Libraries, provides a demo of Chainguard Libraries for JavaScript, outlines the CVE remediation processes for Python libraries, and addresses questions from the audience.
Read the show notes: https://edu.chainguard.dev/software-security/learning-labs/ll202510/
Discover more about Chainguard Libraries: https://www.chainguard.dev/libraries
Check out our Chainguard Libraries documentation: https://edu.chainguard.dev/chainguard/libraries/overview/
Explore Chainguard Libraries for Python, now Generally Available: https://www.chainguard.dev/unchained/chainguard-libraries-for-python-now-generally-available-with-cve-remediation-and-malware-protection
Reach out to our team about Chainguard Libraries: https://get.chainguard.dev/chainguard-libraries-closed-beta?_gl=1*7jlfrk*_gcl_aw*R0NMLjE3NjAwMzIxODcuQ2p3S0NBand1cDNIQmhBQUVpd0E3ZXVadXNjZFR6cWNlaF9UeGw2UmR4dlMzYjMyYVNaX3N6SUE1aWZtX2RQYkhMMXVnS0xZWDJGM1ZCb0MtdWtRQXZEX0J3RQ..*_gcl_au*MTQ0NDA4OTM3MS4xNzU0MzM3MTE4
TIMESTAMPS
0:00 Introduction
1:55 Agenda
2:54 Secure container and the role of libraries
5:20 Software supply chain for libraries and security
6:51 Chainguard Libraries and the JavaScript ecosystem
14:33 Malware in the npm ecosystem
18:39 Chainguard Libraries for JavaScript
25:57 Demoes with npm and pnpm
33:50 Troubleshooting results and additional demos
41:34 Chainguard Libraries for Python
43:39 CVE remediation process and examples
52:03 Demoes with uv and grype
56:25 Further resources
57:35 Next up
58:18 Questions
1:06:00 Wrapping up
About Chainguard
Founded by the industry's leading experts on open source software, security and cloud native development, we are on a mission to be the safe source for open source.
Where to find us:
Website: https://www.chainguard.dev/
Twitter: twitter.com/chainguard_dev
LinkedIn: linkedin.com/company/chainguard-dev
TikTok: tiktok.com/@chainguard_dev
