@n8n/n8n-nodes-langchain

Dependency profilecaution

The release declares 90 runtime dependencies, creating a broad update and compatibility surface, though this is consistent with a package providing many integrations.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less explicit. The organization-owned monorepo context partly compensates, but the linkage remains a transparency caution.

Workflow auditcaution

The audit covered only 30 of 111 workflows, so coverage is incomplete. It found high-confidence blanket GitHub App permissions and inherited secrets, plus template-injection findings and three unpinned references; no untrusted checkout or script-injection sink was found, limiting the impact to workflow hygiene caution.