Libraries examples

Point your package manager at Chainguard, reinstall, and ship — no breaking changes. Chainguard Libraries are rebuilt from verified source as drop-in replacements for the packages you already use.

These on-ramp guides link to the published Chainguard Libraries documentation. Libraries are currently available for Java, Python, and JavaScript — a reader on another ecosystem can still build with Chainguard Containers.

On-ramp guides

• Quickstart: swap in a library — point your package manager at Chainguard, reinstall, and ship.
• Java — which Maven Central artifacts Chainguard rebuilds, and how Maven and Gradle reach them.
• JavaScript — which npm packages Chainguard rebuilds, and how npm, pnpm, Yarn, and Bun reach them.
• Python — which PyPI packages Chainguard rebuilds, and how pip, uv, and Poetry reach them.

Moving an existing project rather than starting a new one? The migration guides cover that path.

Example projects

For hands-on testing, each ecosystem has a demo repository with example projects you can clone and run:

• Chainguard Libraries for Java — Maven and Gradle projects, including a Spring Boot application and CVE remediation demos.
• Chainguard Libraries for JavaScript — npm, pnpm, Yarn, and Bun examples, each with a demo.sh script.
• Chainguard Libraries for Python — pip, uv, and Poetry examples, each with a demo.sh script.