@langchain/classic
Old abstractions from LangChain.js
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:handlebars | AI (dependencies): Handlebars is a legitimate templating library used by LangChain for prompt formatting; already marked as accepted risk. | ai |
Versions (showing 40 of 40)
| Version | Deps | Published |
|---|---|---|
| 1.0.32 | 8 / 93 | |
| 1.0.31 | 9 / 93 | |
| 1.0.30 | 9 / 93 | |
| 1.0.28 | 9 / 93 | |
| 1.0.27 | 9 / 106 | |
| 1.0.24 | 9 / 106 | |
| 1.0.20 | 9 / 106 | |
| 1.0.19 | 9 / 106 | |
| 1.0.18 | 9 / 106 | |
| 1.0.17 | 9 / 106 | |
| 1.0.15 | 9 / 106 | |
| 1.0.14 | 9 / 106 | |
| 1.0.13 | 9 / 106 | |
| 1.0.12 | 9 / 106 | |
| 1.0.11 | 9 / 106 | |
| 1.0.9 | 9 / 106 | |
| 1.0.8 | 9 / 107 | |
| 1.0.6 | 9 / 107 | |
| 1.0.5 | 10 / 106 | |
| 1.0.3 | 10 / 106 | |
| 1.0.2 | 10 / 106 | |
| 1.0.1 | 10 / 107 | |
| 1.0.0 | 10 / 107 | |
| 1.0.28-dev-1775244116634 | 9 / 93 | |
| 1.0.24-dev-1773962633795 | 9 / 106 | |
| 1.0.24-dev-1773786580575 | 9 / 106 | |
| 1.0.24-dev-1773785150055 | 9 / 106 | |
| 1.0.24-dev-1773776071697 | 9 / 106 | |
| 1.0.24-dev-1773712098100 | 9 / 106 | |
| 1.0.24-dev-1773710628974 | 9 / 106 | |
| 1.0.24-dev-1773709997654 | 9 / 106 | |
| 1.0.24-dev-1773698445534 | 9 / 106 | |
| 1.0.23-dev-1773345797648 | 9 / 106 | |
| 1.0.18-dev-1771365493298 | 9 / 106 | |
| 1.0.10-dev-1768440391024 | 9 / 106 | |
| 1.0.7-dev-1765937705265 | 9 / 107 | |
| 1.0.6-dev-1765433794876 | 9 / 107 | |
| 1.0.6-dev-1765432861398 | 9 / 107 | |
| 1.0.6-dev-1765431816670 | 9 / 107 | |
| 1.0.0-alpha.1 | 10 / 109 |
v1.0.32
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.28
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.27
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.