Jon Douglas
About
Jon Douglas is a Principal Product Manager at Microsoft specializing in software supply chain security. He leads work across NuGet, npm, and the Visual Studio Marketplace and he helped push the VEX vulnerability standard across the industry. He previously shipped many of NuGet's security features and worked on .NET and GitHub Copilot. Jon also sits on multiple committees for the NIH RECOVER initiative, where he helps design clinical trials, organize conferences, and review research proposals. He holds an MS in AI and ML from UT Austin.
Sessions at .NET Conf 2026
6:00 PM – 6:30 PM
Tuesday, November 10
6 PM - 6:30 PM PST
Securing Your NuGet Dependencies in the Age of AI
Jon Douglas
AI is changing how we build .NET apps, and it's changing how packages find their way into our code. Copilot and coding agents can add a dependency in seconds. Attackers know this, and they're moving just as fast. The question is no longer only which packages you trust. It's how trust holds up when machines are making the choices. In this session, Jon Douglas and friends from the NuGet team share how Microsoft is rethinking supply chain security for this new era. You'll see how security now spans the whole journey of a package, from the moment it's published to NuGet.org to the moment it's restored on your machine. On the registry side, that means catching malicious packages before they spread and raising the bar for who can publish. On the client side, it means giving you and your AI tools better signals and safer defaults at every step. You'll leave with a clear picture of where NuGet security is headed and simple steps to protect your projects today.
View session details