`langsmith`

Ecosystem:
npm

Package URL:
pkg:npm/langsmith

Total PRs:
368 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
183 repositories

Unique Repos (30 days):
33 repositories

Security Advisories

LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection

GHSA-v34v-rq6j-cj6p CVE-2026-25528 MODERATE published 4 months ago • updated 4 days ago

## Summary The LangSmith SDK's distributed tracing feature is vulnerable to Server-Side Request Forgery via malicious HTTP headers. An attacker ca...

LangSmith SDK: Streaming token events bypass output redaction

GHSA-rr7j-v2q5-chgv CVE-2026-41182 MODERATE published 2 months ago • updated 2 days ago

## Summary The LangSmith SDK's output redaction controls (hideOutputs in JS, hide_outputs in Python) do not apply to streaming token events. When ...

LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `proto` Guard in Internal lodash `set()`

GHSA-fw9q-39r9-c252 CVE-2026-40190 MODERATE published 2 months ago • updated 2 days ago

# GHSA-fw9q-39r9-c252: Prototype Pollution via Incomplete Lodash `set()` Guard in `langsmith-sdk` **Severity:** Medium (CVSS ~5.6) **Status:** Fix...

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

GHSA-3644-q5cj-c5c7 CVE-2026-45134 HIGH published about 1 month ago • updated 2 days ago

## Description The LangSmith SDK's prompt pull methods (`pull_prompt` / `pull_prompt_commit` in Python, `pullPrompt` / `pullPromptCommit` in JS/TS...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates

GlacierEQ/langgraph #12

0.3.49 → 0.3.87 Patch PR

Open 3 days ago 3 comments

chore(deps-dev): bump the dev-dependencies group across 1 directory with 4 updates

AgentsKit-io/agentskit #976

0.7.5 → 0.7.6 Patch PR

Open 5 days ago 1 comment

deps(deps): bump the prod-misc group across 1 directory with 21 updates

shchilkin/PopChoice #679

0.7.2 → 0.7.4 Patch PR

Closed 12 days ago 1 comment

feat(deps): Bump the npm_and_yarn group across 17 directories with 5 updates

SherfeyInv/sentry-javascript #240

0.3.74 → 0.3.87 Patch PR

Closed 15 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

GlacierEQ/langgraph #9

0.3.49 → 0.3.87 Patch PR

Open 22 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 3 updates

bluluvinn/genkit #38

0.1.14 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 48 directories with 3 updates

XavierMP14/Microsoft-Teams-Samples #135

0.1.31 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 35 directories with 3 updates

XavierMP14/Microsoft-Teams-Samples #127

0.1.31 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 17 directories with 3 updates

arthrod/CopilotKit #55

0.1.39 → 0.1.68 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 17 directories with 3 updates

jadenblack/composio #127

0.1.41 → 0.1.68 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

GlacierEQ/stagehand #12

0.3.23 → 0.3.87 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 20 directories with 5 updates

jadenblack/composio #124

0.1.41 → 0.1.68 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 20 directories with 5 updates

idgrou/composio #318

0.1.41 → 0.1.68 Patch PR

Open about 1 month ago 2 comments

chore(deps): Bump the npm_and_yarn group across 17 directories with 6 updates

SherfeyInv/sentry-javascript #210

0.3.74 → 0.3.87 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 3 updates

GoldenEagle-23/genkit #113

0.1.14 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 18 directories with 8 updates

arthrod/CopilotKit #51

0.1.39 → 0.1.68 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 19 directories with 4 updates

paulpham157/composio #115

0.1.41 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 17 directories with 4 updates

idgrou/composio #314

0.1.41 → 0.1.68 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 17 directories with 4 updates

jadenblack/composio #119

0.1.41 → 0.1.68 Patch PR

Closed about 1 month ago 3 comments

chore(deps): Bump the npm_and_yarn group across 7 directories with 11 updates

SherfeyInv/sentry-javascript #199

0.3.74 → 0.3.87 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 18 directories with 10 updates

arthrod/CopilotKit #44

0.1.48 → 0.1.68 Patch PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

balajirajput96/stagehand #8

0.3.23 → 0.3.87 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 24 directories with 4 updates

idgrou/composio #295

0.1.41 → 0.1.68 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 24 directories with 4 updates

dshivendra/composio #42

0.1.41 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 24 directories with 5 updates

jadenblack/composio #101

0.1.41 → 0.1.68 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 15 directories with 15 updates

marcelolavor/omnivore #72

0.1.8 → 0.1.68 Patch PR

Closed about 1 month ago 1 comment

deps(npm): bump the production group across 1 directory with 40 updates

pohi99999/mcp-brunella-core #172

0.5.17 → 0.5.26 Patch PR

Open about 2 months ago 2 comments

deps(npm): bump the production group across 1 directory with 37 updates

pohi99999/mcp-brunella-core #171

0.5.17 → 0.5.25 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the repo-toolchain group across 1 directory with 26 updates

oaslananka-lab/a2a-mesh #3

0.5.21 → 0.5.25 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates

traceroot-ai/traceroot-ts #75

0.5.16 → 0.5.23 Patch PR

Open about 2 months ago 4 comments

Bump the npm_and_yarn group across 11 directories with 14 updates

quazfenton/binG #69

0.5.8 → 0.5.19 Patch PR

Open about 2 months ago 16 comments

Bump the npm_and_yarn group across 11 directories with 15 updates

quazfenton/binG #68

0.5.8 → 0.5.19 Patch PR

Open about 2 months ago 13 comments

chore(deps): bump the npm_and_yarn group across 25 directories with 4 updates

PostHog/posthog-js #3430

0.5.11 → 0.5.21 Patch PR

Open about 2 months ago 5 comments

build(deps): bump the minor-and-patch group across 1 directory with 16 updates

langchain-ai/agent-inbox #126

0.5.14 → 0.5.20 Patch PR

Closed about 2 months ago 3 comments

⬆️ Bump langsmith from 0.5.18 to 0.5.20 in the npm_and_yarn group across 1 directory

romantech/simple-kanban #182

0.5.18 → 0.5.20 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 26 directories with 4 updates

PostHog/posthog-js #3421

0.5.11 → 0.5.20 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 25 directories with 5 updates

PostHog/posthog-js #3420

0.5.11 → 0.5.20 Patch PR

Open about 2 months ago 6 comments

chore(deps): bump the npm_and_yarn group across 27 directories with 4 updates

PostHog/posthog-js #3408

0.5.11 → 0.5.20 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 32 directories with 7 updates

GlacierEQ/CopilotKit #204

0.3.28 → 0.3.87 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 34 directories with 5 updates

tristanaburns/CopilotKit-1 #42

0.3.28 → 0.3.87 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 34 directories with 6 updates

FazalRSA/CopilotKit #143

0.3.28 → 0.3.87 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 34 directories with 6 updates

tristanaburns/CopilotKit-1 #37

0.3.28 → 0.3.87 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 32 directories with 6 updates

GlacierEQ/CopilotKit #198

0.3.28 → 0.3.87 Patch PR

Open about 2 months ago 3 comments

chore(deps-dev): bump the dev-dependencies group with 2 updates

AgentsKit-io/agentskit #328

0.5.19 → 0.5.20 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 26 directories with 5 updates

PostHog/posthog-js #3396

0.5.11 → 0.5.20 Patch PR

Open 2 months ago 6 comments

chore(deps): bump the npm_and_yarn group across 35 directories with 5 updates

GlacierEQ/CopilotKit #192

0.3.28 → 0.3.87 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 29 directories with 7 updates

PostHog/posthog-js #3395

0.5.11 → 0.5.20 Patch PR

Open 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 26 directories with 5 updates

PostHog/posthog-js #3394

0.5.11 → 0.5.20 Patch PR

Closed 2 months ago 7 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

ankushchhabra02/vortex #23

0.5.18 → 0.5.20 Patch PR

Open 2 months ago 1 comment

Bump langsmith from 0.5.18 to 0.5.20

cykj40/journal-ai-app #11

0.5.18 → 0.5.20 Patch PR

Open 2 months ago 1 comment

Package Details

Name:	`langsmith`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/langsmith`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 1

MODERATE 3

View All npm Advisories

Package Information

Description:

Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.

Repository:	https://github.com/langchain-ai/langsmith-sdk
Homepage:	https://github.com/langchain-ai/langsmith-sdk#readme
Latest Release:	`0.3.30` about 1 year ago
Dependent Repos:	1,422
Dependent Packages:	12
Downloads:	5,825,320
Ranking:	Top 0.5299% by dependent repos Top 0.3024% by downloads Top 1.7801% by dependent pkgs

PR Status

Open 177 (48.1%)

Merged 22 (6.0%)

Closed 168 (45.7%)

PR Types

Minor 160 (43.5%)

Patch 204 (55.4%)

Removal 2 (0.5%)