--- title: Chainguard Introduces Secure Repository for JavaScript... description: Chainguard launches a closed beta for curated JavaScript libraries rebuilt from source code to eliminate npm ecosystem vulnerabilities. The service uses secure... canonical: https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Chainguard Introduces Secure Repository for JavaScript Libraries | daily.dev og:description: Chainguard launches a closed beta for curated JavaScript libraries rebuilt from source code to eliminate npm ecosystem vulnerabilities. The service uses secure... og:url: https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein og:image: https://api.daily.dev/og/posts/wC3x7Fein.png og:image:alt: Chainguard Introduces Secure Repository for JavaScript Libraries og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Chainguard Introduces Secure Repository for JavaScript Libraries **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Chainguard launches a closed beta for curated JavaScript libraries rebuilt from source code to eliminate npm ecosystem vulnerabilities. The service uses secure infrastructure and AI agents to rebuild popular libraries from GitHub sources, implementing Google's SLSA framework for supply chain security. The solution integrates with existing artifact management systems and follows Chainguard's previous work with Java and Python library collections. ## Content Chainguard has announced a new initiative aimed at strengthening the security of JavaScript libraries by addressing vulnerabilities in the npm ecosystem. Through the launch of a closed beta for a curated collection of JavaScript libraries rebuilt from source code, the company seeks to eliminate the risks associated with malware injection that have plagued many popular dependencies. This service comes as a response to recent cybersecurity incidents, such as the Shai-Halud attack, where compromised npm packages disrupted development processes and pushed some companies to pause their operations. Chainguard's approach involves rebuilding libraries directly from their GitHub source codes on a secure infrastructure, thereby sidestepping the vulnerable distribution chain prone to attacks. The process is further accelerated with the use of AI agents, prioritizing the most widely used libraries first. In addition to focusing on security, Chainguard's solution leverages Google's SLSA (Supply chain Levels for Software Artifacts) framework, providing safe, malware-free builds of thousands of JavaScript dependencies. This curated repository smoothly integrates with existing artifact management systems like JFrog Artifactory and Sonatype Nexus, ensuring a seamless experience for enterprise-level clients already showing keen interest in the service. Chainguard has previously offered trusted library collections for other programming languages such as Java and Python, and their plans indicate an expansion into additional languages. This move marks a significant step in protecting open-source software supply chains from cybercriminal activities and contributes to building a more secure development ecosystem. ## Similar posts on daily.dev - [Chainguard offers malware-resistant JavaScript libraries](https://daily.dev/posts/chainguard-offers-malware-resistant-javascript-libraries-4cbhmxrmn) · InfoWorld · 1 upvotes · 1 comments - [Chainguard Expands Repository to Add More Secure Open Source Libraries](https://daily.dev/posts/chainguard-expands-repository-to-add-more-secure-open-source-libraries-6ys47rbar) · DevOps.com · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#javascript](https://daily.dev/tags/javascript), [#npm](https://daily.dev/tags/npm), [#supply-chain](https://daily.dev/tags/supply-chain) [View this post on daily.dev](https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Chainguard Introduces Secure Repository for JavaScript Libraries","url":"https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein"},"datePublished":"2025-09-25T14:57:45.914Z","dateModified":"2025-09-25T19:06:36.187Z","description":"Chainguard launches a closed beta for curated JavaScript libraries rebuilt from source code to eliminate npm ecosystem vulnerabilities. The service uses secure...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/686679858aa6edf9fb07f233d2abd639?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/686679858aa6edf9fb07f233d2abd639?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/chainguard-introduces-secure-repository-for-javascript-libraries-wc3x7fein","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,javascript,npm,supply-chain","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Chainguard Introduces Secure Repository for JavaScript Libraries"}]} ```