langsmith
Client library to connect to the LangSmith Observability and Evaluation Platform.
84%
Total Score
healthy
Frequent releases and active organization-backed maintenance outweigh significant GitHub Actions permission and pinning concerns.
Health Score Breakdown
All 13 workflows were analyzed, but five use high-confidence blanket GitHub App permissions, five use unpinned tools, and high-confidence template-injection findings remain. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene concern rather than a standalone severe dependency risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-41182 langsmith is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 0.5.18 and 0.0.0 - 0.7.30. | 0.0.0 - 0.7.30 | Medium |
CVE-2026-40190 langsmith is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.5.17. | 0.0.0 - 0.5.17 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 p-queue Version 6.6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 3 years ago
- Unpacked Size
- 8.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.