--- title: "langchain-tutorials trust report" type: "trust-report" slug: "gkamradt-langchain-tutorials" canonical_url: "https://www.graphcanon.com/tools/gkamradt-langchain-tutorials/trust" computed_at: "2026-07-11T10:52:15.875Z" maintenance_label: "Dormant" security_status: "findings" --- # langchain-tutorials trust report _Sourced [trust signals](/glossary/trust-and-signals/trust-signal) from public GitHub metadata and optional dependency [security scans](/glossary/trust-and-signals/security-scan). Not a security guarantee._ ## Maintenance - Label: Dormant (18% recency signal) - Days since last push: 705 - Methodology: github_public_v1 ## Provenance - GitHub repo id: 601277247 - Not a fork - Owner type: User - Computed at: 2026-07-11T10:52:15.875Z - Methodology: github_public_v1 ## Security scan - Status: Findings present (0 critical, 0 high, 0 medium, 174 low) · last scan 2026-07-11T10:52:16.921Z ### Findings - **low**: GHSA-2fqr-mr3j-6wp8 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-2vrm-gr82-f7m5 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-3wq7-rqq7-wx6j (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-4fvr-rgm6-gqmc (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-4m7w-qmgq-4wj5 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-54jq-c3m8-4m76 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-5h86-8mv2-jq9f (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-5m98-qgg9-wh84 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-63hf-3vf5-4wqf (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-63hw-fmq6-xxg2 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-69f9-5gxw-wvc2 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-6jhg-hg63-jvvf (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-6mq8-rvhq-8wgg (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-7gpw-8wmc-pm8g (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-8495-4g3g-x7pr (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-8qpw-xqxj-h4r2 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-9548-qrrj-x5pj (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-966j-vmvw-g2g9 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-9x8q-7h8h-wcw9 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-c427-h43c-vf67 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-fh55-r93g-j68g (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-g3cq-j2xw-wf74 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-g84x-mcqj-x9qq (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-hcc4-c3v8-rx92 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-hg6j-4rv6-33pg (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-hpj7-wq8m-9hgp (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-jg22-mg44-37j8 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-jj3x-wxrx-4x23 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-m5qp-6w8w-w647 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-m6qw-4cw2-hm4m (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-mqqc-3gqh-h2x8 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-mwh4-6h8g-pg8w (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-p998-jp59-783m (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-w2fm-2cpv-w7v5 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-xcgm-r5h9-7989 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2024-24 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2024-26 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1097 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1098 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1099 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1100 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1101 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1102 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1103 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1104 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1105 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1106 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1107 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-1109 (aiohttp@3.9.1 · requirements.txt) - **low**: PYSEC-2026-237 (aiohttp@3.9.1 · requirements.txt) - **low**: GHSA-8rfp-98v4-mmr6 (bleach@6.1.0 · requirements.txt) - **low**: GHSA-gj48-438w-jh9v (bleach@6.1.0 · requirements.txt) - **low**: GHSA-248v-346w-9cwc (certifi@2023.7.22 · requirements.txt) - **low**: PYSEC-2024-230 (certifi@2023.7.22 · requirements.txt) - **low**: GHSA-3ww4-gg4f-jr7f (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-537c-gmf6-5ccf (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-6vqw-3v5j-54x4 (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-9v9h-cgj8-h64p (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-h4gh-qq45-vh27 (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-m959-cc7f-wv43 (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-r6ph-v2qm-q3c2 (cryptography@41.0.7 · requirements.txt) - **low**: PYSEC-2024-225 (cryptography@41.0.7 · requirements.txt) - **low**: PYSEC-2026-1283 (cryptography@41.0.7 · requirements.txt) - **low**: PYSEC-2026-1285 (cryptography@41.0.7 · requirements.txt) - **low**: PYSEC-2026-35 (cryptography@41.0.7 · requirements.txt) - **low**: GHSA-3rq5-2g8h-59hc (dnspython@2.4.2 · requirements.txt) - **low**: PYSEC-2026-1307 (dnspython@2.4.2 · requirements.txt) - **low**: PYSEC-2024-38 (fastapi@0.104.1 · requirements.txt) - **low**: GHSA-qmgc-5h2g-mvrw (filelock@3.13.1 · requirements.txt) - **low**: GHSA-w853-jp5j-5j7f (filelock@3.13.1 · requirements.txt) - **low**: PYSEC-2026-1374 (filelock@3.13.1 · requirements.txt) - **low**: PYSEC-2026-1375 (filelock@3.13.1 · requirements.txt) - **low**: GHSA-g4m4-9q4c-mfw6 (fiona@1.9.5 · requirements.txt) - **low**: GHSA-q5fm-55c2-v6j9 (fiona@1.9.5 · requirements.txt) - **low**: GHSA-68rp-wp8r-4726 (Flask@2.3.3 · requirements.txt) - **low**: GHSA-768j-98cg-p3fv (fonttools@4.44.0 · requirements.txt) - **low**: PYSEC-2026-1389 (fonttools@4.44.0 · requirements.txt) - **low**: GHSA-6497-prx7-gpmq (geopandas@0.14.0 · requirements.txt) - **low**: PYSEC-2026-62 (geopandas@0.14.0 · requirements.txt) - **low**: GHSA-2mqj-m65w-jghx (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-7545-fcxq-7j24 (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-mv93-w799-cj2w (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-rpm5-65cw-6hj4 (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-v87r-6q3f-2j67 (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-x2qx-6953-8485 (GitPython@3.1.40 · requirements.txt) - **low**: PYSEC-2024-4 (GitPython@3.1.40 · requirements.txt) - **low**: GHSA-hc5x-x2vx-497g (gunicorn@20.1.0 · requirements.txt) - **low**: GHSA-w3h3-4rj7-4ph4 (gunicorn@20.1.0 · requirements.txt) - **low**: PYSEC-2026-1433 (gunicorn@20.1.0 · requirements.txt) - **low**: PYSEC-2026-1434 (gunicorn@20.1.0 · requirements.txt) - **low**: GHSA-vqfr-h8mv-ghfj (h11@0.14.0 · requirements.txt) - **low**: PYSEC-2026-348 (h11@0.14.0 · requirements.txt) - **low**: GHSA-65pc-fj4g-8rjx (idna@3.4 · requirements.txt) - **low**: GHSA-jjg7-2v4v-x38h (idna@3.4 · requirements.txt) - **low**: PYSEC-2024-60 (idna@3.4 · requirements.txt) - **low**: PYSEC-2026-215 (idna@3.4 · requirements.txt) - **low**: GHSA-cpwx-vrp4-4pq7 (Jinja2@3.1.2 · requirements.txt) - **low**: GHSA-gmj6-6f8f-6699 (Jinja2@3.1.2 · requirements.txt) - **low**: GHSA-h5c8-rqwp-cp95 (Jinja2@3.1.2 · requirements.txt) - **low**: GHSA-h75v-3vvj-5mfj (Jinja2@3.1.2 · requirements.txt) - **low**: GHSA-q2x7-8rv6-6q7h (Jinja2@3.1.2 · requirements.txt) - **low**: PYSEC-2026-1471 (Jinja2@3.1.2 · requirements.txt) - **low**: PYSEC-2026-1472 (Jinja2@3.1.2 · requirements.txt) - **low**: PYSEC-2026-1473 (Jinja2@3.1.2 · requirements.txt) - **low**: PYSEC-2026-1474 (Jinja2@3.1.2 · requirements.txt) - **low**: PYSEC-2026-1475 (Jinja2@3.1.2 · requirements.txt) - **low**: GHSA-4qhp-652w-c22x (jupyter-lsp@2.2.0 · requirements.txt) - **low**: PYSEC-2026-1478 (jupyter-lsp@2.2.0 · requirements.txt) - **low**: GHSA-33p9-3p43-82vq (jupyter_core@5.5.0 · requirements.txt) - **low**: PYSEC-2026-1477 (jupyter_core@5.5.0 · requirements.txt) - **low**: GHSA-24qx-w28j-9m6p (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-5789-5fc7-67v3 (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-5mrq-x3x5-8v8f (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-fcw5-x6j4-ccmp (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-gf7q-q4j7-hp7c (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-h56g-gq9v-vc8r (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-hrw6-wg82-cm62 (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-qh7q-6qm3-653w (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2023-272 (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2024-165 (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2026-366 (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2026-67 (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2026-68 (jupyter_server@2.9.1 · requirements.txt) - **low**: PYSEC-2026-69 (jupyter_server@2.9.1 · requirements.txt) - **low**: GHSA-37w4-hwhx-4rc4 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-44cc-43rp-5947 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-4m77-cmpx-vjc4 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-9q39-rmj3-p4r2 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-mqcg-5x36-vfcg (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-rch3-82jr-f9w9 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-vmhf-c436-hxj4 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-vvfj-2jqx-52jm (jupyterlab@4.0.7 · requirements.txt) - **low**: PYSEC-2026-1482 (jupyterlab@4.0.7 · requirements.txt) - **low**: PYSEC-2026-164 (jupyterlab@4.0.7 · requirements.txt) - **low**: GHSA-3644-q5cj-c5c7 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-3hjh-jh2h-vrg6 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-45pg-36p6-83v9 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-gr75-jv2w-4656 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-h9j7-5xvc-qhg5 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-rgp8-pm28-3759 (langchain@0.0.352 · requirements.txt) - **low**: PYSEC-2024-118 (langchain@0.0.352 · requirements.txt) - **low**: PYSEC-2024-43 (langchain@0.0.352 · requirements.txt) - **low**: PYSEC-2026-1507 (langchain@0.0.352 · requirements.txt) - **low**: PYSEC-2026-1509 (langchain@0.0.352 · requirements.txt) - **low**: PYSEC-2026-1510 (langchain@0.0.352 · requirements.txt) - **low**: GHSA-f2jm-rw3h-6phg (langchain-community@0.0.6 · requirements.txt) - **low**: GHSA-h5gc-rm8j-5gpr (langchain-community@0.0.6 · requirements.txt) - **low**: GHSA-pc6w-59fv-rh23 (langchain-community@0.0.6 · requirements.txt) - **low**: GHSA-q25c-c977-4cmh (langchain-community@0.0.6 · requirements.txt) - **low**: PYSEC-2024-278 (langchain-community@0.0.6 · requirements.txt) - **low**: PYSEC-2025-70 (langchain-community@0.0.6 · requirements.txt) - **low**: PYSEC-2026-1514 (langchain-community@0.0.6 · requirements.txt) - **low**: PYSEC-2026-1515 (langchain-community@0.0.6 · requirements.txt) - **low**: PYSEC-2026-1516 (langchain-community@0.0.6 · requirements.txt) - **low**: GHSA-2g6r-c272-w58r (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-6qv9-48xg-fc7f (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-926x-3r5x-gfhw (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-c67j-w6g6-q2cm (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-h59x-p739-982c (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-pjwx-r37v-7724 (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-q84m-rmw3-4382 (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-qh6h-p6c9-ff54 (langchain-core@0.1.10 · requirements.txt) - **low**: PYSEC-2024-45 (langchain-core@0.1.10 · requirements.txt) - **low**: PYSEC-2026-1518 (langchain-core@0.1.10 · requirements.txt) - **low**: PYSEC-2026-1519 (langchain-core@0.1.10 · requirements.txt) - **low**: PYSEC-2026-373 (langchain-core@0.1.10 · requirements.txt) - **low**: GHSA-v8vj-cv27-hjv8 (langchain-experimental@0.0.47 · requirements.txt) - **low**: GHSA-wmvm-9vqv-5qpp (langchain-experimental@0.0.47 · requirements.txt) - **low**: PYSEC-2024-53 (langchain-experimental@0.0.47 · requirements.txt) - **low**: PYSEC-2026-375 (langchain-experimental@0.0.47 · requirements.txt) - **low**: GHSA-r7w7-9xr2-qq2r (langchain-openai@0.0.2.post1 · requirements.txt) - **low**: PYSEC-2026-76 (langchain-openai@0.0.2.post1 · requirements.txt) - **low**: GHSA-f4xh-w4cj-qxq8 (langsmith@0.0.73 · requirements.txt) - **low**: GHSA-rr7j-v2q5-chgv (langsmith@0.0.73 · requirements.txt) ## Method and caveats These are heuristics from public GitHub data and optional dependency scans, sourced and dated. "No criticals found on 2026-07-11" is not a guarantee of safety. See the full methodology: [/trust-methodology](/trust-methodology.md). ## Common questions ### Is langchain-tutorials maintained? GraphCanon rates langchain-tutorials "Dormant" (18% maintenance signal from public GitHub metadata, computed today). Last push was 705 days ago. This is a recency heuristic, not a guarantee the project will stay maintained. ### Is langchain-tutorials safe to use? Last scanned today (deps profile). Status: 174 low - 174 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify langchain-tutorials as safe - review maintenance, provenance, and scan findings on this page before adopting. ### Is langchain-tutorials a fork? No. langchain-tutorials is not flagged as a fork in GitHub metadata at the time of the last refresh. ### Does langchain-tutorials have known security vulnerabilities? Last scanned today (deps profile). Status: 174 low - 174 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. ### How often is the langchain-tutorials trust report updated? Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1). ### What does GraphCanon never claim about langchain-tutorials? We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for langchain-tutorials. Signals are sourced heuristics with explicit limits - see [trust methodology](/trust-methodology). ### How does GraphCanon assess trust for langchain-tutorials? Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read [trust methodology](/trust-methodology) for full scope and limits. --- **Machine-readable endpoints** - JSON: [`/api/graphcanon/tools/gkamradt-langchain-tutorials/trust`](/api/graphcanon/tools/gkamradt-langchain-tutorials/trust) - LLM index: [/llms.txt](/llms.txt) - Full corpus: [/llms-full.txt](/llms-full.txt) _GraphCanon - The knowledge graph for AI development. https://www.graphcanon.com/_