npm langchain @1.4.6
score
0.8
high
flagged
2026-06-17 17:07
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['lc-oss-admin'] |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.4.6 but max published is 2.0.0-dev-1765937705265 |
| shared_repo_different_publisher | 0.9 | repo 'git+ssh://git@github.com/langchain-ai/langchainjs.git' also claimed by 10 package(s) under different publishers: ['npm/@langchain/google-gauth', 'npm/@langchain/ibm', 'npm/@langchain/google-vertexai-web'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"christian-bromann",
"nfcampos",
"jacoblee93",
"andrewnguonly",
"davidduong",
"hntrl",
"hwchase17",
"basproul"
],
"versions": 449
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-pwuFmGOyiMezptLVLrpb5jILirvYPGHI5uJCFHL5K5WPxMy2XuPLI5QNMKtoHkdiL6a2dLebqugKw87cneaESw==",
"tarball": "https://registry.npmjs.org/langchain/-/langchain-1.4.6.tgz",
"unpackedSize": 3128837
},
"dist-tags": {
"alpha": "1.0.0-alpha.9",
"dev": "1.4.6-dev-1781497519109",
"latest": "1.4.6",
"next": "1.0.0-alpha.9",
"tag-for-publishing-older-releases": "0.2.20"
},
"latest_version": "1.4.6",
"maintainers": [
{
"email": "hunter@hntrl.io",
"name": "hntrl"
},
{
"email": "oss-admin@langchain.dev",
"name": "lc-oss-admin"
}
],
"num_versions": 451,
"repository": {
"type": "git",
"url": "git+ssh://git@github.com/langchain-ai/langchainjs.git"
},
"scripts": {
"build": "turbo build:compile --filter langchain --output-logs new-only",
"build:compile": "tsdown",
"clean": "rm -rf .turbo dist/",
"precommit": "lint-staged",
"test": "vitest run",
"test:bench": "vitest --mode bench --run",
"test:integration": "vitest --mode int",
"test:watch": "vitest --watch"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.4.6 but max published is 2.0.0-dev-1765937705265",
"maintainer_churn": "added: ['lc-oss-admin']",
"shared_repo_different_publisher": "repo 'git+ssh://git@github.com/langchain-ai/langchainjs.git' also claimed by 10 package(s) under different publishers: ['npm/@langchain/google-gauth', 'npm/@langchain/ibm', 'npm/@langchain/google-vertexai-web'] ..."
},
"time": {
"created": "2023-02-14T18:06:57.074Z",
"modified": "2026-06-17T22:06:59.541Z"
}
}