langsmith
Client library to connect to the LangSmith Observability and Evaluation Platform.
82%
Total Score
healthy
Frequent releases and organization backing outweigh workflow permission and pinning hygiene concerns.
Health Score Breakdown
All 13 workflows were analyzed, but five use top-level write permissions, ten of 57 action references are unpinned, and high-confidence findings report blanket GitHub App permissions; with no untrusted checkout or script-injection trigger, these are workflow hygiene concerns rather than a severe release risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-41182 langsmith is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 0.5.18 and 0.0.0 - 0.7.30. | 0.0.0 - 0.7.30 | Medium |
CVE-2026-40190 langsmith is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.5.17. | 0.0.0 - 0.5.17 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 p-queue Version 6.6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 18 hours ago
- Created
- 3 years ago
- Unpacked Size
- 8.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.