@langchain/langgraph-sdk

Lifecycle scriptscaution

A prepublish lifecycle script adds some publication complexity, but the repository's release workflow and build tooling provide compensating context.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @langchain/langgraph-sdk, so the package-to-repository relationship is not directly established. The monorepo naming mismatch alone is ordinary, but the lack of a README mention remains a transparency concern.

Workflow auditcaution

All seven workflows were analyzed and all 40 action references are pinned, with no untrusted checkout or script-injection findings. The high-confidence use-trusted-publishing finding and top-level write permissions in three workflows warrant workflow-hygiene caution, although npm provenance is present.