{
"canonical_url": "github.com/langchain-ai/langchain",
"capabilities": [],
"category": "Framework / orchestration",
"commercial": false,
"compliance": [
{
"certificate_id": "langchain, inc.",
"covers_resource": "unknown",
"credited": true,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "LangChain, Inc.",
"terms": [
"star_level_1",
"caiq"
]
},
"display": "STAR Level 1: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/langchain, inc.",
"framework": "csa_star",
"issued": "2025-11-25",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:33Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_1"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://docs.langchain.com/",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "0802aaf09bf73613263a7ca394bf4c3c7c583455f741af8bf31a0b698353f51a",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:23Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://docs.langchain.com/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "0802aaf09bf73613263a7ca394bf4c3c7c583455f741af8bf31a0b698353f51a",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:23Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "SOC 2 Type II: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://docs.langchain.com/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "0802aaf09bf73613263a7ca394bf4c3c7c583455f741af8bf31a0b698353f51a",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:23Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "SOC2_TYPE_II"
}
],
"deployment": "GitHub; LangSmith/LangGraph Platform",
"description": "Huge open-source adoption; broad model/tool ecosystem; active enterprise ecosystem.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 16.2,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "general",
"rank": 5,
"recomputed": 95.2,
"score": 92.7,
"score_version": "sar-score-2.0",
"seed_rank": 5,
"seed_score": 95.2,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 23.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "security",
"rank": 21,
"recomputed": 82.8,
"score": 89.3,
"score_version": "sar-score-2.0",
"seed_rank": 21,
"seed_score": 82.8,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "data",
"rank": 26,
"recomputed": 88.7,
"score": 97.6,
"score_version": "sar-score-2.0",
"seed_rank": 26,
"seed_score": 88.7,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 47,
"recomputed": 76.8,
"score": 84.0,
"score_version": "sar-score-2.0",
"seed_rank": 47,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 20.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5
},
"profile": "regulated",
"rank": 44,
"recomputed": 77.3,
"score": 85.0,
"score_version": "sar-score-2.0",
"seed_rank": 44,
"seed_score": 77.3,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 16.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 39,
"recomputed": 76.8,
"score": 84.4,
"score_version": "sar-score-2.0",
"seed_rank": 39,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.3,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 33,
"recomputed": 76.8,
"score": 84.0,
"score_version": "sar-score-2.0",
"seed_rank": 33,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 36,
"recomputed": 76.8,
"score": 84.0,
"score_version": "sar-score-2.0",
"seed_rank": 36,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 45,
"recomputed": 76.8,
"score": 84.0,
"score_version": "sar-score-2.0",
"seed_rank": 45,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 16.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"gdpr": 0.15,
"soc2": 0.15
},
"profile": "commercial",
"rank": 19,
"recomputed": 85.9,
"score": 93.4,
"score_version": "sar-score-2.0",
"seed_rank": 19,
"seed_score": 85.9,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 16.2,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "operations",
"rank": 20,
"recomputed": 82.7,
"score": 93.4,
"score_version": "sar-score-2.0",
"seed_rank": 20,
"seed_score": 82.7,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 13.0,
"health": 20.0,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"soc2": 0.15
},
"profile": "technology",
"rank": 6,
"recomputed": 98.4,
"score": 97.6,
"score_version": "sar-score-2.0",
"seed_rank": 6,
"seed_score": 98.4,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {
"github": "langchain-ai/langchain"
},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_55582a24f05e0d8c",
"identity": {
"evidence": [
"standards_metadata_at_publisher_domain"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 78,
"incidents": 0,
"links": [
{
"date": "2023-04-05",
"kind": "cve",
"title": "CVE-2023-29374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29374"
},
{
"date": "2023-06-14",
"kind": "cve",
"title": "CVE-2023-34540",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34540"
},
{
"date": "2023-06-20",
"kind": "cve",
"title": "CVE-2023-34541",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34541"
},
{
"date": "2023-07-03",
"kind": "cve",
"title": "CVE-2023-36258",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36258"
},
{
"date": "2023-07-06",
"kind": "cve",
"title": "CVE-2023-36188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36188"
},
{
"date": "2023-07-06",
"kind": "cve",
"title": "CVE-2023-36189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36189"
},
{
"date": "2023-08-05",
"kind": "cve",
"title": "CVE-2023-36095",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36095"
},
{
"date": "2023-08-15",
"kind": "cve",
"title": "CVE-2023-38860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38860"
},
{
"date": "2023-08-15",
"kind": "cve",
"title": "CVE-2023-38896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38896"
},
{
"date": "2023-08-15",
"kind": "cve",
"title": "CVE-2023-39659",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39659"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:12:45Z",
"license": "MIT",
"merged_ids": [
"res_8d4b18cd3300a582"
],
"name": "LangChain",
"news": [
{
"cluster_size": 1,
"date": "2026-10-22T17:47:38Z",
"headline": "langchain release langchain-core 1.7.0",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "Changes since langchain-core==1.6.13\n\nrelease(core): 1.7.0 (#41418)\nfeat(core): emit `tool-call-delta` for streamed tool-call args (#41257)\n\n## Notes\n\n- Tool-call args now stream as `tool-call-delta` slices instead of `block-delta` snapshot",
"tag": "product_update",
"url": "https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.7.0"
},
{
"cluster_size": 1,
"date": "2026-10-21T21:39:16Z",
"headline": "langchain release 1.4.7",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "Changes since langchain==1.4.6\n\nchore(langchain): update lockfile (#41402)\nrelease(langchain): 1.4.7 (#41401)\nchore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/langchain_v1 (#41370)\nfeat(core,langchain,standard-tests): read `",
"tag": "product_update",
"url": "https://github.com/langchain-ai/langchain/releases/tag/langchain%3D%3D1.4.7"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"card_url": "https://docs.langchain.com/.well-known/agent-card.json",
"checked_at": "2026-10-26T12:22:35Z",
"parser_version": "a2a-0.3+1.0",
"protocol_version": "0.3",
"signed": false,
"skills": [
"langchain"
],
"status": "verified",
"version": "1.0.0"
},
"ard": {
"checked_at": "2026-10-26T12:22:33Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_by": "hemant.naik",
"checked_on": "2026-10-02",
"evidence_url": "https://github.com/langchain-ai/langchain-mcp-adapters",
"note": "langchain-mcp-adapters (official LangChain organisation)",
"probe": {
"card_url": "https://docs.langchain.com/.well-known/mcp.json",
"checked_at": "2026-10-26T12:22:35Z",
"status": "invalid"
},
"source": "curated_claim",
"status": "claimed"
}
},
"publisher_domain": "docs.langchain.com",
"resource_type": "framework",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:31:32Z",
"cves": 78,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 30.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 45.0,
"health": 20.0,
"trust": 23.0
},
"signals": {
"github_archived": false,
"github_created_at": "2022-10-17T02:58:36Z",
"github_forks": 24924,
"github_language": "Python",
"github_open_issues": 679,
"github_pushed_at": "2026-10-26T08:40:54Z",
"github_stars": 148485,
"github_topic": "ai-agents",
"homepage": "https://docs.langchain.com/langchain/",
"observed_popularity": "147k",
"seed_enrich": {
"changed": [
"publisher_domain",
"tags"
],
"repo": "langchain-ai/langchain"
}
},
"slug": "langchain-langchain",
"sources": [
{
"payload_hash": "2ba5e920e3f35c488931b46722904b7e32f4bf48398d33d45719d407d187480e",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://github.com/langchain-ai/langchain"
},
{
"payload_hash": "dcf9ecdde80ebf86aa81a99729d666b5b858d4e062bac229e5ac76bf5529d6bf",
"retrieved_at": "2026-10-26T12:12:45Z",
"system": "github",
"url": "https://github.com/langchain-ai/langchain"
}
],
"tags": [
"agents",
"ai",
"ai-agents",
"anthropic",
"chatgpt",
"deepagents",
"enterprise",
"framework",
"gemini",
"generative-ai",
"langchain",
"langgraph",
"llm",
"multiagent",
"open-source",
"openai",
"pydantic",
"python",
"rag",
"typescript"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_55582a24f05e0d8c_2f64500b",
"checked_on": null,
"date": "2026-10-11",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_55582a24f05e0d8c_2f64500b",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agent2Agent (A2A) document",
"served Model Context Protocol (MCP) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "A2A verified (unsigned); MCP invalid",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:606bcfc466829a1d486c7684732d2bb1133f7bd9805871f614d3fff215240497",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of LangChain's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_55582a24f05e0d8c_2f64500b/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 3,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": 1
},
"url": "https://github.com/langchain-ai/langchain",
"vendor": "LangChain"
}