John Speed Meyers
Former Lead ResearcherChainguard
Written by John Speed Meyers

The haunting silence of CVE-Unknown: Unveiling the secrets of silent fixes
product
The unmasking of the Phantom's Masquerade: When junk CVEs reveal their true nature
product
VEXed? Then Grype about it: Chainguard and Anchore announce Grype supports OpenVEX
open source
The haunting of CVE-2022-3474: A ghostly tale of package detection failure
product
The haunting of CVE-2023-2454: A developer's nightmare
product
Working with government and industry to put open source security tooling into practice
open source
Making vulnerability data better for machines (and humans!) with OpenVEX: How Isovalent and Chainguard use OpenVEX
research
Taming bad Python packages: Assessing Python malware detectors with a benchmark dataset
research
Can Protobom end the SBOM format wars?
open source