Library with a Postgres implementation of LangGraph checkpoint saver.
82%
Total Score
healthy
Active releases and broad contributor support outweigh repository-link and workflow permission concerns.
No build attestation or trusted-publisher information was collected, leaving release provenance less transparent than it could be.
The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is less transparent despite the organization-backed monorepo context.
All 17 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions, but high-confidence findings report blanket GitHub App permissions and inherited secrets in several workflows.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-115883 langgraph-checkpoint-postgres is vulnerable to Improper Input Validation in versions 0.0.0 - 3.1.3. | 0.0.0 - 3.1.3 | Medium |
AIKIDO-2026-841773 langgraph-checkpoint-postgres is vulnerable to Incorrect Authorization in versions 0.0.1 - 3.1.0. | 0.0.1 - 3.1.0 | Medium |
| Version | Published | Vulnerabilities |
|---|---|---|
| 3.2.0 | 14 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 3.1.3 | 12 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 3.1.2 | 7 Aug 2026 | 0 0 critical, 1 total 0 0 high, 1 total 1 1 medium, 1 total 0 0 low, 1 total |
| 3.1.1 | 30 Jul 2026 | 0 0 critical, 1 total 0 0 high, 1 total 1 1 medium, 1 total 0 0 low, 1 total |
| 3.1.0 | 12 May 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 3.1.0a4 | 4 May 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 3.1.0a3 | 1 May 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 3.1.0a1 | 30 Apr 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 3.0.5 | 18 Mar 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 3.0.4 | 31 Jan 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
langgraph-checkpoint Version <5.0.0,>=4.3.0 | — | — |
orjson Version >=3.11.5 | — | — |
psycopg-pool Version >=3.2.0 | — | — |
psycopg Version >=3.2.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.