← Home

@langchain/google-genai

41
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

lc-oss-adminlangchain-security

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from manual (hntrl) to CI/CD (GitHub Actions) publishing with SLSA provenance; this is the expected pattern for langchainjs packages. ai
source-diff encoded-string-file:dist/utils/common.cjs AI (source-diff): DUMMY_SIGNATURE is a static base64 placeholder constant for Gemini function-call thought signatures, not a malicious payload. Stable for this package. ai
source-diff encoded-string-file:dist/utils/common.js AI (source-diff): Same DUMMY_SIGNATURE constant in ESM build. Static placeholder, not executed or decoded suspiciously. Stable for this package. ai

Versions (showing 41 of 41)

Version Deps Published
2.2.0 1 / 10
2.1.31 1 / 10
2.1.30 1 / 10
2.1.29 1 / 10
2.1.28 2 / 10
2.1.27 2 / 10
2.1.26 2 / 13
2.1.25 2 / 18
2.1.24 2 / 18
2.1.23 2 / 18
2.1.22 2 / 18
2.1.21 2 / 18
2.1.20 2 / 18
2.1.19 2 / 18
2.1.18 2 / 18
2.1.17 2 / 18
2.1.16 2 / 18
2.1.15 2 / 18
2.1.14 2 / 18
2.1.13 2 / 18
2.1.12 2 / 18
2.1.11 2 / 18
2.1.10 2 / 18
2.1.9 2 / 18
2.1.8 2 / 18
2.1.7 2 / 18
2.1.6 2 / 18
2.1.5 2 / 19
2.1.4 2 / 19
2.1.3 2 / 19
2.1.2 2 / 19
2.1.1 2 / 19
2.1.0 2 / 19
2.0.4 2 / 18
2.0.3 2 / 18
2.0.2 2 / 18
2.0.1 2 / 18
2.0.0 2 / 18
1.0.3 2 / 18
1.0.2 2 / 18
1.0.1 2 / 18