Libraries examples

Point your package manager at Chainguard, reinstall, and ship — no breaking changes. Chainguard Libraries are rebuilt from verified source as drop-in replacements for the packages you already use.

These on-ramp guides link to the published Chainguard Libraries documentation. Libraries are currently available for Java, Python, and JavaScript — a reader on another ecosystem can still build with Chainguard Containers.

On-ramp guides

• Quickstart: swap in a library — point your package manager at Chainguard, reinstall, and ship.
• Migrate a Java project — switch an existing Maven or Gradle project over to Chainguard Libraries.
• Migrate a JavaScript project — switch an existing npm project over to Chainguard Libraries.
• Migrate a Python project — switch an existing pip, uv, or Poetry project over to Chainguard Libraries.

Example projects

For hands-on testing, each ecosystem has a demo repository with example projects you can clone and run:

• Chainguard Libraries for Java — Maven and Gradle projects, including a Spring Boot application and CVE remediation demos.
• Chainguard Libraries for JavaScript — npm, pnpm, Yarn, and Bun examples, each with a demo.sh script.
• Chainguard Libraries for Python — pip, uv, and Poetry examples, each with a demo.sh script.