Chainguard Achieves 94% Python Ecosystem Coverage for Customer Environments

Event summary

  • Chainguard announced 94% coverage of Python dependencies for customer environments, with over 500,000 unique versions built, including complex AI libraries like PyTorch.
  • The company has also rebuilt nearly 1 million unique versions of Java dependencies and covers 88% of npm's top 500 highest-impact JavaScript libraries.
  • Chainguard's SLSA L2-compliant Chainguard Factory enables secure, verifiable builds from source code, addressing the growing risk of malware in open source libraries.
  • Customers such as Abridge AI, Alara, Canva, Cast AI, and Rocket Lab have switched to Chainguard Libraries for secure open source dependencies.

The big picture

Chainguard's expansion reflects the critical need for secure open source dependencies as software supply chain attacks rise. With 4% of GitHub commits now authored by AI coding tools, the company's ability to rebuild dependencies from verified source code positions it as a key player in addressing the tradeoff between development velocity and security. The strategic shift towards secure-by-default infrastructure is likely to resonate with enterprises across highly regulated industries and high-growth AI startups.

What we're watching

Security Posture
How Chainguard's secure-by-default approach will affect adoption rates among enterprises facing increasing software supply chain attacks.
Market Penetration
Whether Chainguard can sustain its rapid coverage expansion across Python, Java, and JavaScript ecosystems to maintain competitive advantage.
AI Integration
The pace at which AI coding tools like Claude Code will drive further demand for secure open source dependencies.

Related topics

Technology