Public record
Software health reportschema 0.34.0 · metrics 2.10.0 · 2026-09-16 13:25 UTC

langgenius / dify

Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.

TypeScript · PythonCustom license★ 155,938 stars⑂ 24,629 forkssince Apr 2023View on GitHub ↗
KindCommand-line toolNetwork serviceWeb interfaceLibraryhow this is determined
#ai#gpt#llm#openai#python#agent#nextjs#workflow#genai#automation#low-code#mcp#no-code#agentic-ai#agentic-framework#agentic-workflow#claude#skills#deepseek

langgenius/dify holds a health index of 97 out of 100, placing it in the Exceptional band. It scores highest on Vitality (96/100) and lowest on Security (51/100). It was last updated today. 9 contributors account for most of its recent work.

97
overall / 100
Exceptional

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

97
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 85 is calibrated to 97 on the published index scale (record calibration 2026-08-02).

Ownership

LangGeniusOrganization · verified domain
3,758 followers43 public repossince Mar 2023

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/langgenius/difyv0.8.3-fix1-1637 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

96Exceptional · 21% of overall

Development activity

100Exceptional
How it's scored
36/36Push recency — last push 0 days ago
36/36Commit cadence — 52/52 weeks with commits
18/18Commit volume — 6,067 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year6,067
human_commit_share0.9
days_since_last_push0
active_weeks_last_year52

Release discipline

90Excellent
How it's scored
27/27Ships releases — 100 releases published
36/36Release recency — latest release 6 days ago
27/27Release cadence — a release every ~18.6 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count100
latest_release_tag1.17.1
releases_from_tagsno
days_since_latest_release6
mean_days_between_releases18.6

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

93Exceptional · 17% of overall

Popularity & adoption

100Exceptional
How it's scored
60/60Stars — 155,938 stars
25/25Forks — 24,629 forks
15/15Watchers — 840 watchers
Inputs used
forks24,629
stars155,938
watchers840
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

86Excellent
How it's scored
22.5/22.5README
16.9/22.5License — license file present, not a recognized license
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
6.3/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges26
has_contributingyes
has_issue_templateno
has_code_of_conductyes
readme_badge_servicesshields.io
has_pull_request_templateyes

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

87Excellent · 23% of overall

Maintainer resilience (bus factor)

98Exceptional
How it's scored
54/54Bus factor — 9 contributor(s) cover half of all commits
20.3/22.5Commit distribution — top contributor authored 10% of commits
13.5/13.5Contributor breadth — 98 contributors
10/10OpenSSF Scorecard: Contributors — project has 25 contributing companies or organizations
Inputs used
bus_factor9
contributors_sampled98
top_contributor_share0.097

Issue & PR responsiveness

85Excellent
How it's scored
41.2/42Issue resolution — 98% of issues closed
24.2/30PR acceptance — 14,093/17,503 decided PRs merged
4.9/13Newcomer PR acceptance — 3/8 first-time contributors' PRs merged in 30d
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Inputs used
merged_prs14,093
open_issues380
closed_issues18,613
prs_merged_7d11
prs_decided_7d57
prs_merged_30d12
prs_decided_30d58
issue_closed_ratio0.98
closed_unmerged_prs3,410
first_time_authors_30d8
first_time_prs_merged_30d3
first_time_prs_decided_30d8

Ownership & stewardship

94Exceptional
How it's scored
30/30Ownership backing — organization-owned
20/20Verified domain
25/25Owner reach — 3,758 followers of langgenius
19/25Track record — 43 public repos, account ~3 yr old
Inputs used
followers3,758
owner_typeOrganization
is_verifiedyes
owner_loginlanggenius
public_repos43
account_age_days1,289

Package maintenance

63Moderate
How it's scored
25/25Published & resolvable — 1 package(s) on go
14/35Publish recency — latest publish 637 days ago
4/20Version history — 1 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesgithub.com/langgenius/dify
ecosystemsgo
any_deprecatedno
min_days_since_publish637

Engineering Quality

Are baseline engineering and documentation practices in place?

90Excellent · 19% of overall

Engineering practices

90Excellent
How it's scored
24/24CI workflows — 37 workflow(s)
24/24Tests present
16/16Linter config — .ruff.toml, dify-agent/pyproject.toml ([tool.ruff]), eslint.config.mjs
0/9.6Pre-commit hooks
6.4/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigyes
has_linter_configyes
has_precommit_configno

Documentation

90Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://dify.ai
10/10Repository description
10/10Topics — 19 topics
0/10Wiki
Inputs used
topicsai, gpt, llm, openai, python, agent, nextjs, workflow, genai, automation, low-code, mcp, no-code, agentic-ai, agentic-framework, agentic-workflow, claude, skills, deepseek
has_wikino
homepagehttps://dify.ai
docs_sitehttps://dify.ai
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

51Moderate · 16% of overall

Security posture

60Moderate
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 25 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
3.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
1.5/5SAST — SAST tool is not run on all commits -- score normalized to 3
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 22 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate6

Dependency advisories

17Critical
How it's scored
2.1/35Direct dependencies free of known advisories — 14 affected: @orpc/client catalog: (critical 9.8), dompurify catalog: (critical 10.0), open catalog: (critical), +11 more
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
11/40No advisories left outstanding — 14 advisory-carrying package(s) unaddressed past 90 days; oldest published 3,248 days ago
Inputs used
sourceosv
advisories188
affected_packages36
assessed_packages841
unassessed_packages15
affected_by_severitycritical 8, high 18, moderate 9, unknown 1
direct_affected_packages14
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 841 resolved dependencies against OSV. 15 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

93Exceptional · 4% of overall

Agent context & guidance

100Exceptional
How it's scored
45/45Agent instructions — AGENTS.md, CLAUDE.md, api/AGENTS.md, cli/AGENTS.md, cli/src/commands/AGENTS.md, dify-agent/AGENTS.md, e2e/AGENTS.md, e2e/features/agent-v2/AGENTS.md, packages/dify-ui/AGENTS.md, web/AGENTS.md, web/CLAUDE.md, web/features/agent-v2/AGENTS.md
15/15Machine-readable docs (llms.txt) — llms.txt served by the project website (https://dify.ai/llms.txt)
40/40Legible commit history — 90 of 90 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtyes
llms_txt_urlhttps://dify.ai/llms.txt
legible_history_share1
agent_instruction_filesAGENTS.md, CLAUDE.md, api/AGENTS.md, cli/AGENTS.md, cli/src/commands/AGENTS.md, dify-agent/AGENTS.md, e2e/AGENTS.md, e2e/features/agent-v2/AGENTS.md, packages/dify-ui/AGENTS.md, web/AGENTS.md, web/CLAUDE.md, web/features/agent-v2/AGENTS.md
agent_instruction_max_bytes8,168

Verify loop (build / test / typecheck)

97Exceptional
How it's scored
18/18One-command bootstrap — Makefile, dify-agent-runtime/Makefile, dify-agent/Makefile
22/22Automated tests
11/11Lint / format config — .ruff.toml, dify-agent/pyproject.toml ([tool.ruff]), eslint.config.mjs
11/11Static type checking — api/providers/trace/trace-aliyun/src/dify_trace_aliyun/py.typed, api/providers/trace/trace-arize-phoenix/src/dify_trace_arize_phoenix/py.typed, api/providers/trace/trace-langfuse/src/dify_trace_langfuse/py.typed, api/providers/trace/trace-langsmith/src/dify_trace_langsmith/py.typed, api/providers/trace/trace-mlflow/src/dify_trace_mlflow/py.typed, api/providers/trace/trace-opik/src/dify_trace_opik/py.typed, api/providers/trace/trace-tencent/src/dify_trace_tencent/py.typed, api/providers/trace/trace-weave/src/dify_trace_weave/py.typed, cli/tsconfig.json, dify-agent/src/shellctl/py.typed, e2e/tsconfig.json, packages/contracts/tsconfig.json, packages/dev-proxy/tsconfig.json, packages/dify-ui/tsconfig.json, packages/jotai-tanstack-form/tsconfig.json, packages/migrate-no-unchecked-indexed-access/tsconfig.json, packages/nuqs-jotai/tsconfig.json, sdks/nodejs-client/tsconfig.json, web/tsconfig.json
10/10Reproducible environment — devcontainer, Dockerfile, lockfile
10/10Demonstrated agent practice — 7 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 9 of the last 100 commits are automated dependency updates
7/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
Inputs used
has_nixno
has_testsyes
lockfilescomposer.lock, go.sum, pnpm-lock.yaml, uv.lock
has_dockerfileyes
typed_languageyes
bootstrap_filesMakefile, dify-agent-runtime/Makefile, dify-agent/Makefile
has_devcontaineryes
has_linter_configyes
typecheck_configsapi/providers/trace/trace-aliyun/src/dify_trace_aliyun/py.typed, api/providers/trace/trace-arize-phoenix/src/dify_trace_arize_phoenix/py.typed, api/providers/trace/trace-langfuse/src/dify_trace_langfuse/py.typed, api/providers/trace/trace-langsmith/src/dify_trace_langsmith/py.typed, api/providers/trace/trace-mlflow/src/dify_trace_mlflow/py.typed, api/providers/trace/trace-opik/src/dify_trace_opik/py.typed, api/providers/trace/trace-tencent/src/dify_trace_tencent/py.typed, api/providers/trace/trace-weave/src/dify_trace_weave/py.typed, cli/tsconfig.json, dify-agent/src/shellctl/py.typed, e2e/tsconfig.json, packages/contracts/tsconfig.json, packages/dev-proxy/tsconfig.json, packages/dify-ui/tsconfig.json, packages/jotai-tanstack-form/tsconfig.json, packages/migrate-no-unchecked-indexed-access/tsconfig.json, packages/nuqs-jotai/tsconfig.json, sdks/nodejs-client/tsconfig.json, web/tsconfig.json
agent_commit_share0.07
toolchain_manifestsdify-agent-runtime/go.mod
dependency_bot_commit_share0.09

Code legibility for models

99Exceptional
How it's scored
45/45Type-checkable code — TypeScript (statically typed)
54.4/55Manageable file sizes — 113/11,075 source files over 60KB
Inputs used
primary_languageTypeScript
largest_source_bytes5,749,518
source_files_sampled11,075
oversized_source_files113

Machine-readable interfaces

60Moderate
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
20/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalyes
api_schema_files—
interfaces_expected_ofnetwork-service

Key facts

155,938GitHub stars
98contributors
6,067commits, last 12 months
0days since last push
100releases
9bus factor
380open issues
Go, npm, PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • First-time contributor figures cover 12 of 39 authors (cap 12)
  • Could not fetch npm package '@langgenius/difyctl' from its registry
  • Could not fetch pypi package 'dify-api' from its registry
  • Could not fetch pypi package 'dify-agent' from its registry

More detail

Star and fork history 0 ★ / 24,629 ⇿
0Stars
24,629Forks
2Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.

23,50023,75024,00024,25024,50024,75024,629332026-082026-082026-09
Major 0Minor 1Patch 1
OpenSSF Scorecard 6.0 / 10
6.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-09-16 13:24 UTC

10Binary-Artifactsno binaries found in the repo
1Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 25 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
10Maintained30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
7Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 7
3SASTSAST tool is not run on all commits -- score normalized to 3
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities22 existing vulnerabilities detected
Direct dependencies 170
RegistryPackageVersion constraintManifest
PyPIbleach>=6.4.0,<7.0.0api/pyproject.toml
PyPIboto3>=1.43.88,<2.0.0api/pyproject.toml
PyPIcelery>=5.6.3,<6.0.0api/pyproject.toml
PyPIcroniter>=6.2.2,<7.0.0api/pyproject.toml
PyPIdify-agent—api/pyproject.toml
PyPIflask>=3.1.3,<4.0.0api/pyproject.toml
PyPIflask-cors>=6.0.5,<7.0.0api/pyproject.toml
PyPIgevent>=26.4.0,<26.5.0api/pyproject.toml
PyPIgevent-websocket==0.10.1api/pyproject.toml
PyPIgmpy2>=2.3.0,<3.0.0api/pyproject.toml
PyPIgoogle-api-python-client>=2.200.0,<3.0.0api/pyproject.toml
PyPIgunicorn>=26.2.0,<27.0.0api/pyproject.toml
PyPIpsycogreen>=1.0.2,<2.0.0api/pyproject.toml
PyPIpsycopg2-binary>=2.9.12,<3.0.0api/pyproject.toml
PyPIpython-socketio>=5.13.0,<6.0.0api/pyproject.toml
PyPIredis>=7.4.0,<8.0.0api/pyproject.toml
PyPIsendgrid>=6.12.5,<7.0.0api/pyproject.toml
PyPIsseclient-py>=1.8.0,<2.0.0api/pyproject.toml
PyPIaliyun-log-python-sdk==0.9.44api/pyproject.toml
PyPIazure-identity>=1.25.3,<2.0.0api/pyproject.toml
PyPIflask-compress>=1.24,<2.0.0api/pyproject.toml
PyPIflask-login==0.6.3api/pyproject.toml
PyPIflask-migrate>=4.1.0,<5.0.0api/pyproject.toml
PyPIflask-orjson>=2.0.0,<3.0.0api/pyproject.toml
PyPIflask-restx>=1.3.2,<2.0.0api/pyproject.toml
PyPIgoogle-cloud-aiplatform>=2.1.0,<3.0.0api/pyproject.toml
PyPIhttpx==0.28.1api/pyproject.toml
PyPIopentelemetry-distro==0.65b0api/pyproject.toml
PyPIopentelemetry-instrumentation-celery==0.65b0api/pyproject.toml
PyPIopentelemetry-instrumentation-flask==0.65b0api/pyproject.toml
PyPIopentelemetry-instrumentation-httpx==0.65b0api/pyproject.toml
PyPIopentelemetry-instrumentation-redis==0.65b0api/pyproject.toml
PyPIopentelemetry-instrumentation-sqlalchemy==0.65b0api/pyproject.toml
PyPIopentelemetry-propagator-b3>=1.44.0,<2.0.0api/pyproject.toml
PyPIreadabilipy==0.3.0api/pyproject.toml
PyPIresend>=2.27.0,<3.0.0api/pyproject.toml
PyPIzstandard==0.25.0api/pyproject.toml
PyPIfastopenapi==0.7.0api/pyproject.toml
PyPIgraphon==0.7.0api/pyproject.toml
PyPIhttpx-sse==0.4.3api/pyproject.toml
PyPIjson-repair==0.60.1api/pyproject.toml
npm@dify/contractsworkspace:*cli/package.json
npm@napi-rs/keyringcatalog:cli/package.json
npm@orpc/clientcatalog:cli/package.json
npm@orpc/contractcatalog:cli/package.json
npm@orpc/openapi-clientcatalog:cli/package.json
npmcli-table3catalog:cli/package.json
npmeventsource-parsercatalog:cli/package.json
npmjs-yamlcatalog:cli/package.json
npmlockfilecatalog:cli/package.json
npmopencatalog:cli/package.json
npmoracatalog:cli/package.json
npmpicocolorscatalog:cli/package.json
npmstd-semvercatalog:cli/package.json
npmundicicatalog:cli/package.json
npmzodcatalog:cli/package.json
Gogithub.com/klauspost/compressv1.19.2dify-agent-runtime/go.mod
Gogithub.com/landlock-lsm/go-landlockv0.9.0dify-agent-runtime/go.mod
Gogithub.com/spf13/cobrav1.10.2dify-agent-runtime/go.mod
Gomodernc.org/sqlitev1.37.1dify-agent-runtime/go.mod
PyPIhttpx==0.28.1dify-agent/pyproject.toml
PyPIhttpx2>=2.5.0,<3.0.0dify-agent/pyproject.toml
PyPIpydantic>=2.12.5,<2.13dify-agent/pyproject.toml
PyPIpydantic-ai-harness>=0.20.0,<0.21.0dify-agent/pyproject.toml
PyPIpydantic-ai-slim>=2.30.0,<3.0.0dify-agent/pyproject.toml
PyPItyping-extensions>=4.12.2,<5.0.0dify-agent/pyproject.toml
npm@amplitude/analytics-browsercatalog:web/package.json
npm@amplitude/plugin-session-replay-browsercatalog:web/package.json
npm@base-ui/reactcatalog:web/package.json
npm@emoji-mart/datacatalog:web/package.json
npm@floating-ui/reactcatalog:web/package.json
npm@formatjs/intl-localematchercatalog:web/package.json
npm@heroicons/reactcatalog:web/package.json
npm@lexical/codecatalog:web/package.json
npm@lexical/linkcatalog:web/package.json
npm@lexical/listcatalog:web/package.json
npm@lexical/reactcatalog:web/package.json
npm@lexical/selectioncatalog:web/package.json
npm@lexical/textcatalog:web/package.json
npm@lexical/utilscatalog:web/package.json
npm@mediabunny/mp3-encodercatalog:web/package.json
npm@monaco-editor/reactcatalog:web/package.json
npm@orpc/clientcatalog:web/package.json
npm@orpc/contractcatalog:web/package.json
npm@orpc/openapi-clientcatalog:web/package.json
npm@orpc/tanstack-querycatalog:web/package.json
npm@remixicon/reactcatalog:web/package.json
npm@sentry/reactcatalog:web/package.json
npm@streamdown/mathcatalog:web/package.json
npm@svgdotjs/svg.jscatalog:web/package.json
npm@t3-oss/env-nextjscatalog:web/package.json
npm@tanstack/query-corecatalog:web/package.json
npm@tanstack/react-formcatalog:web/package.json
npm@tanstack/react-hotkeyscatalog:web/package.json
npm@tanstack/react-querycatalog:web/package.json
npm@tanstack/react-virtualcatalog:web/package.json
npmabcjscatalog:web/package.json
npmahookscatalog:web/package.json
npmbowsercatalog:web/package.json
npmclass-variance-authoritycatalog:web/package.json
npmcopy-to-clipboardcatalog:web/package.json
npmcron-parsercatalog:web/package.json
npmdayjscatalog:web/package.json
npmdecimal.jscatalog:web/package.json
npmdompurifycatalog:web/package.json
npmechartscatalog:web/package.json
npmecharts-for-reactcatalog:web/package.json
npmelkjscatalog:web/package.json
npmembla-carousel-autoplaycatalog:web/package.json
npmembla-carousel-fadecatalog:web/package.json
npmembla-carousel-reactcatalog:web/package.json
npmemoji-martcatalog:web/package.json
npmes-toolkitcatalog:web/package.json
npmfast-deep-equalcatalog:web/package.json
npmfoxactcatalog:web/package.json
npmfuse.jscatalog:web/package.json
npmhast-util-to-jsx-runtimecatalog:web/package.json
npmhtml-entitiescatalog:web/package.json
npmhtml-to-imagecatalog:web/package.json
npmi18nextcatalog:web/package.json
npmi18next-resources-to-backendcatalog:web/package.json
npmimmercatalog:web/package.json
npmjotaicatalog:web/package.json
npmjotai-scopecatalog:web/package.json
npmjotai-tanstack-querycatalog:web/package.json
npmjs-cookiecatalog:web/package.json
npmjs-yamlcatalog:web/package.json
npmjsonschemacatalog:web/package.json
npmkatexcatalog:web/package.json
npmkycatalog:web/package.json
npmlexicalcatalog:web/package.json
npmloro-crdtcatalog:web/package.json
npmmediabunnycatalog:web/package.json
npmmermaidcatalog:web/package.json
npmmimecatalog:web/package.json
npmmittcatalog:web/package.json
npmmotioncatalog:web/package.json
npmnegotiatorcatalog:web/package.json
npmnextcatalog:web/package.json
npmnext-themescatalog:web/package.json
npmnuqscatalog:web/package.json
npmpinyin-procatalog:web/package.json
npmqrcode.reactcatalog:web/package.json
npmqscatalog:web/package.json
npmreactcatalog:web/package.json
npmreact-domcatalog:web/package.json
npmreact-easy-cropcatalog:web/package.json
npmreact-i18nextcatalog:web/package.json
npmreact-papaparsecatalog:web/package.json
npmreact-pdf-highlightercatalog:web/package.json
npmreact-sortablejscatalog:web/package.json
npmreact-textarea-autosizecatalog:web/package.json
npmreactflowcatalog:web/package.json
npmremark-breakscatalog:web/package.json
npmremark-directivecatalog:web/package.json
npmschedulercatalog:web/package.json
npmserver-onlycatalog:web/package.json
npmshikicatalog:web/package.json
npmsocket.io-clientcatalog:web/package.json
npmsortablejscatalog:web/package.json
npmstd-semvercatalog:web/package.json
npmstreamdowncatalog:web/package.json
npmstring-tscatalog:web/package.json
npmtldtscatalog:web/package.json
npmunist-util-visitcatalog:web/package.json
npmuse-context-selectorcatalog:web/package.json
npmuuidcatalog:web/package.json
npmzodcatalog:web/package.json
npmzundocatalog:web/package.json
npmzustandcatalog:web/package.json
All dependencies 856

Full resolved dependency set from the GitHub dependency graph: 165 direct and 691 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Gogithub.com/klauspost/compressv1.19.2direct
Gogithub.com/landlock-lsm/go-landlockv0.9.0direct
Gogithub.com/spf13/cobrav1.10.2direct
Gomodernc.org/sqlitev1.37.1direct
npm@amplitude/analytics-browsercatalog:direct
npm@amplitude/plugin-session-replay-browsercatalog:direct
npm@base-ui/reactcatalog:direct
npm@emoji-mart/datacatalog:direct
npm@floating-ui/reactcatalog:direct
npm@formatjs/intl-localematchercatalog:direct
npm@heroicons/reactcatalog:direct
npm@lexical/codecatalog:direct
npm@lexical/linkcatalog:direct
npm@lexical/listcatalog:direct
npm@lexical/reactcatalog:direct
npm@lexical/selectioncatalog:direct
npm@lexical/textcatalog:direct
npm@lexical/utilscatalog:direct
npm@mediabunny/mp3-encodercatalog:direct
npm@monaco-editor/reactcatalog:direct
npm@napi-rs/keyringcatalog:direct
npm@orpc/clientcatalog:direct
npm@orpc/contractcatalog:direct
npm@orpc/openapi-clientcatalog:direct
npm@orpc/tanstack-querycatalog:direct
npm@remixicon/reactcatalog:direct
npm@sentry/reactcatalog:direct
npm@streamdown/mathcatalog:direct
npm@svgdotjs/svg.jscatalog:direct
npm@t3-oss/env-nextjscatalog:direct
npm@tanstack/query-corecatalog:direct
npm@tanstack/react-formcatalog:direct
npm@tanstack/react-hotkeyscatalog:direct
npm@tanstack/react-querycatalog:direct
npm@tanstack/react-virtualcatalog:direct
npmabcjscatalog:direct
npmahookscatalog:direct
npmbowsercatalog:direct
npmclass-variance-authoritycatalog:direct
npmcli-table3catalog:direct
npmcopy-to-clipboardcatalog:direct
npmcron-parsercatalog:direct
npmdayjscatalog:direct
npmdecimal.jscatalog:direct
npmdompurifycatalog:direct
npmechartscatalog:direct
npmecharts-for-reactcatalog:direct
npmelkjscatalog:direct
npmembla-carousel-autoplaycatalog:direct
npmembla-carousel-fadecatalog:direct
npmembla-carousel-reactcatalog:direct
npmemoji-martcatalog:direct
npmes-toolkitcatalog:direct
npmeventsource-parsercatalog:direct
npmfast-deep-equalcatalog:direct
npmfoxactcatalog:direct
npmfuse.jscatalog:direct
npmhast-util-to-jsx-runtimecatalog:direct
npmhtml-entitiescatalog:direct
npmhtml-to-imagecatalog:direct
npmi18nextcatalog:direct
npmi18next-resources-to-backendcatalog:direct
npmimmercatalog:direct
npmjotaicatalog:direct
npmjotai-scopecatalog:direct
npmjotai-tanstack-querycatalog:direct
npmjs-cookiecatalog:direct
npmjs-yamlcatalog:direct
npmjsonschemacatalog:direct
npmkatexcatalog:direct
npmkycatalog:direct
npmlexicalcatalog:direct
npmlockfilecatalog:direct
npmloro-crdtcatalog:direct
npmmediabunnycatalog:direct
npmmermaidcatalog:direct
npmmimecatalog:direct
npmmittcatalog:direct
npmmotioncatalog:direct
npmnegotiatorcatalog:direct
npmnextcatalog:direct
npmnext-themescatalog:direct
npmnuqscatalog:direct
npmopencatalog:direct
npmoracatalog:direct
npmpicocolorscatalog:direct
npmpinyin-procatalog:direct
npmqrcode.reactcatalog:direct
npmqscatalog:direct
npmreactcatalog:direct
npmreact-domcatalog:direct
npmreact-easy-cropcatalog:direct
npmreact-i18nextcatalog:direct
npmreact-papaparsecatalog:direct
npmreact-pdf-highlightercatalog:direct
npmreact-sortablejscatalog:direct
npmreact-textarea-autosizecatalog:direct
npmreactflowcatalog:direct
npmremark-breakscatalog:direct
npmremark-directivecatalog:direct
npmschedulercatalog:direct
npmserver-onlycatalog:direct
npmshikicatalog:direct
npmsocket.io-clientcatalog:direct
npmsortablejscatalog:direct
npmstd-semvercatalog:direct
npmstreamdowncatalog:direct
npmstring-tscatalog:direct
npmtldtscatalog:direct
npmundicicatalog:direct
npmunist-util-visitcatalog:direct
npmuse-context-selectorcatalog:direct
npmuuidcatalog:direct
npmzodcatalog:direct
npmzundocatalog:direct
npmzustandcatalog:direct
PyPIaliyun-log-python-sdk0.9.44direct
PyPIazure-identity1.25.3direct
PyPIbleach6.4.0direct
PyPIboto31.43.88direct
PyPIcelery5.6.3direct
PyPIcroniter6.2.2direct
PyPIdify-agent1.17.1direct
PyPIfastopenapi0.7.0direct
PyPIflask3.1.3direct
PyPIflask-compress1.24direct
PyPIflask-cors6.0.5direct
PyPIflask-login0.6.3direct
PyPIflask-migrate4.1.0direct
PyPIflask-orjson2.0.0direct
PyPIflask-restx1.3.3.dev0direct
PyPIgevent26.4.0direct
PyPIgevent-websocket0.10.1direct
PyPIgmpy22.3.0direct
PyPIgoogle-api-python-client2.200.0direct
PyPIgoogle-cloud-aiplatform2.1.0direct
PyPIgraphon0.5.2direct
PyPIgraphon0.7.0direct
PyPIgunicorn26.2.0direct
PyPIhttpx0.28.1direct
PyPIhttpx-sse0.4.3direct
PyPIhttpx22.12.0direct
PyPIjson-repair0.60.1direct
PyPIopentelemetry-distro0.65b0direct
PyPIopentelemetry-instrumentation-celery0.65b0direct
PyPIopentelemetry-instrumentation-flask0.65b0direct
PyPIopentelemetry-instrumentation-httpx0.63b1direct
PyPIopentelemetry-instrumentation-httpx0.65b0direct
PyPIopentelemetry-instrumentation-redis0.63b1direct
PyPIopentelemetry-instrumentation-redis0.65b0direct
PyPIopentelemetry-instrumentation-sqlalchemy0.65b0direct
PyPIopentelemetry-propagator-b31.44.0direct
PyPIpsycogreen1.0.2direct
PyPIpsycopg2-binary2.9.12direct
PyPIpydantic2.12.5direct
PyPIpydantic-ai-harness0.20.0direct
PyPIpydantic-ai-slim2.31.0direct
PyPIpython-socketio5.16.3direct
PyPIreadabilipy0.3.0direct
PyPIredis7.4.0direct
PyPIresend2.27.0direct
PyPIsendgrid6.12.5direct
PyPIsseclient-py1.9.0direct
PyPItyping-extensions4.15.0direct
PyPIzstandard0.25.0direct
Gogithub.com/dustin/go-humanizev1.0.1indirect
Gogithub.com/google/uuidv1.6.0indirect
Gogithub.com/inconshreveable/mousetrapv1.1.0indirect
Gogithub.com/mattn/go-isattyv0.0.20indirect
Gogithub.com/ncruces/go-strftimev0.1.9indirect
Gogithub.com/remyoudompheng/bigfftv0.0.0-20230129092748-24d4a6f8daecindirect
Gogithub.com/spf13/pflagv1.0.9indirect
Gogolang.org/x/expv0.0.0-20250408133849-7e4ce0ab07d0indirect
Gogolang.org/x/modv0.35.0indirect
Gogolang.org/x/sysv0.45.0indirect
Gogolang.org/x/toolsv0.44.0indirect
Gokernel.org/pub/linux/libs/security/libcap/psxv1.2.77indirect
Gomodernc.org/libcv1.65.7indirect
Gomodernc.org/mathutilv1.7.1indirect
Gomodernc.org/memoryv1.11.0indirect
npm@axe-core/playwrightcatalog:indirect
npm@chromatic-com/storybookcatalog:indirect
npm@cucumber/cucumbercatalog:indirect
npm@egoist/tailwindcss-iconscatalog:indirect
npm@hey-api/openapi-tscatalog:indirect
npm@hono/node-servercatalog:indirect
npm@iconify-json/heroiconscatalog:indirect
npm@iconify-json/ricatalog:indirect
npm@playwright/testcatalog:indirect
npm@pnpm/exe.darwin-arm6412.3.4indirect
npm@pnpm/exe.darwin-x6412.3.4indirect
npm@pnpm/exe.linux-arm6412.3.4indirect
npm@pnpm/exe.linux-arm64-musl12.3.4indirect
npm@pnpm/exe.linux-x6412.3.4indirect
npm@pnpm/exe.linux-x64-musl12.3.4indirect
npm@pnpm/exe.win32-arm6412.3.4indirect
npm@pnpm/exe.win32-x6412.3.4indirect
npm@rgrove/parse-xmlcatalog:indirect
npm@storybook/addon-a11ycatalog:indirect
npm@storybook/addon-docscatalog:indirect
npm@storybook/addon-linkscatalog:indirect
npm@storybook/addon-onboardingcatalog:indirect
npm@storybook/addon-themescatalog:indirect
npm@storybook/addon-vitestcatalog:indirect
npm@storybook/nextjs-vitecatalog:indirect
npm@storybook/reactcatalog:indirect
npm@storybook/react-vitecatalog:indirect
npm@t3-oss/env-corecatalog:indirect
npm@tailwindcss/postcsscatalog:indirect
npm@tailwindcss/vitecatalog:indirect
npm@tanstack/form-corecatalog:indirect
npm@testing-library/domcatalog:indirect
npm@testing-library/jest-domcatalog:indirect
npm@testing-library/reactcatalog:indirect
npm@testing-library/user-eventcatalog:indirect
npm@tsslint/clicatalog:indirect
npm@tsslint/compat-eslintcatalog:indirect
npm@tsslint/configcatalog:indirect
npm@types/js-cookiecatalog:indirect
npm@types/lockfilecatalog:indirect
npm@types/negotiatorcatalog:indirect
npm@types/nodecatalog:indirect
npm@types/qscatalog:indirect
npm@types/reactcatalog:indirect
npm@types/react-domcatalog:indirect
npm@types/sortablejscatalog:indirect
npm@typescript/nativecatalog:indirect
npm@vitejs/plugin-reactcatalog:indirect
npm@vitejs/plugin-rsccatalog:indirect
npm@vitest/browser-playwrightcatalog:indirect
npm@vitest/coverage-v8catalog:indirect
npmagentationcatalog:indirect
npmc12catalog:indirect
npmchokidarcatalog:indirect
npmcncatalog:indirect
npmcode-inspector-plugincatalog:indirect
npmhappy-domcatalog:indirect
npmhonocatalog:indirect
npmiconify-import-svgcatalog:indirect
npmplaywrightcatalog:indirect
npmpnpm12.3.4indirect
npmpostcsscatalog:indirect
npmreact-server-dom-webpackcatalog:indirect
npmstorybookcatalog:indirect
npmtailwindcsscatalog:indirect
npmtsxcatalog:indirect
npmtypescriptcatalog:indirect
npmuglify-jscatalog:indirect
npmvinextcatalog:indirect
npmvitecatalog:indirect
npmvite-plugin-inspectcatalog:indirect
npmvite-pluscatalog:indirect
npmvitestcatalog:indirect
npmvitest-browser-reactcatalog:indirect
npmvitest-canvas-mockcatalog:indirect
Packagistguzzlehttp/guzzle7.9.2indirect
Packagistguzzlehttp/promises2.2.0indirect
Packagistguzzlehttp/psr72.7.1indirect
Packagistpsr/http-client1.0.3indirect
Packagistpsr/http-factory1.0.2indirect
Packagistpsr/http-message2.0indirect
Packagistralouphie/getallheaders3.0.3indirect
Packagistsymfony/deprecation-contracts3.5.1indirect
PyPIabnf2.2.0indirect
PyPIaiofiles24.1.0indirect
PyPIaiofiles25.1.0indirect
PyPIaiohappyeyeballs2.6.1indirect
PyPIaiohttp3.14.3indirect
PyPIaiomysql0.3.2indirect
PyPIaiosignal1.4.0indirect
PyPIalembic1.17.2indirect
PyPIalibabacloud-credentials1.0.3indirect
PyPIalibabacloud-credentials-api1.0.0indirect
PyPIalibabacloud-gateway-spi0.0.3indirect
PyPIalibabacloud-gpdb20160503—indirect
PyPIalibabacloud-gpdb201605035.9.0indirect
PyPIalibabacloud-tea0.4.3indirect
PyPIalibabacloud-tea-openapi0.4.4indirect
PyPIalibabacloud-tea-util0.3.14indirect
PyPIaliyun-python-sdk-core2.16.0indirect
PyPIaliyun-python-sdk-kms2.16.5indirect
PyPIamqp5.3.1indirect
PyPIaniso860110.0.1indirect
PyPIannotated-doc0.0.4indirect
PyPIannotated-types0.7.0indirect
PyPIanthropic0.112.0indirect
PyPIanyio4.13.0indirect
PyPIanyio4.14.1indirect
PyPIapscheduler3.11.2indirect
PyPIarize-phoenix-otel0.15.0indirect
PyPIasgiref3.11.0indirect
PyPIasgiref3.11.1indirect
PyPIast-serialize0.9.0indirect
PyPIattrs25.4.0indirect
PyPIattrs26.1.0indirect
PyPIauthlib1.6.12indirect
PyPIazure-core1.38.0indirect
PyPIazure-keyvault-keys4.11.2indirect
PyPIazure-storage-blob12.30.1indirect
PyPIbabel2.18.0indirect
PyPIbackoff2.2.1indirect
PyPIbackports-zstd1.3.0indirect
PyPIbackrefs7.0indirect
PyPIbce-python-sdk0.9.79indirect
PyPIbcrypt5.0.0indirect
PyPIbeautifulsoup44.14.3indirect
PyPIbidict0.23.1indirect
PyPIbilliard4.2.3indirect
PyPIblack26.3.1indirect
PyPIblinker1.9.0indirect
PyPIblis1.3.3indirect
PyPIboto3-stubs1.43.88indirect
PyPIbotocore1.43.89indirect
PyPIbotocore-stubs1.41.3indirect
PyPIbracex3.0.1indirect
PyPIbrotli1.2.0indirect
PyPIbrotlicffi1.2.0.0indirect
PyPIbuild1.3.0indirect
PyPIcachetools6.2.6indirect
PyPIcatalogue2.0.10indirect
PyPIcelery-types0.23.0indirect
PyPIcertifi2025.11.12indirect
PyPIcertifi2026.4.22indirect
PyPIcffi2.0.0indirect
PyPIchardet5.1.0indirect
PyPIcharset-normalizer3.4.7indirect
PyPIchroma-hnswlib0.7.6indirect
PyPIchromadb0.5.20indirect
PyPIcint1.0.0indirect
PyPIclick8.3.3indirect
PyPIclick8.4.2indirect
PyPIclick-default-group1.2.4indirect
PyPIclick-didyoumean0.3.1indirect
PyPIclick-plugins1.1.1.2indirect
PyPIclick-repl0.3.0indirect
PyPIclickhouse-connect0.15.1indirect
PyPIclickzetta-connector-python0.8.104indirect
PyPIcloudpathlib0.23.0indirect
PyPIcloudpickle3.1.2indirect
PyPIcloudscraper1.2.71indirect
PyPIcolorama0.4.6indirect
PyPIcoloredlogs15.0.1indirect
PyPIconfection0.1.5indirect
PyPIconfection1.3.3indirect
PyPIconnectrpc0.11.1indirect
PyPIcos-python-sdk-v51.9.44indirect
PyPIcouchbase—indirect
PyPIcouchbase4.6.2indirect
PyPIcoverage7.14.0indirect
PyPIcoverage7.16.0indirect
PyPIcrc32c2.8indirect
PyPIcrcmod1.7indirect
PyPIcryptography50.0.0indirect
PyPIcymem2.0.13indirect
PyPIdarabonba-core1.0.5indirect
PyPIdatabricks-sdk0.73.0indirect
PyPIdateparser1.2.2indirect
PyPIdecorator5.2.1indirect
PyPIdefusedxml0.7.1indirect
PyPIdeprecated1.3.1indirect
PyPIdeprecation2.1.0indirect
PyPIdify-api1.17.1indirect
PyPIdify-trace-aliyun0.0.1indirect
PyPIdify-trace-arize-phoenix0.0.1indirect
PyPIdify-trace-langfuse0.0.1indirect
PyPIdify-trace-langsmith0.0.1indirect
PyPIdify-trace-mlflow0.0.1indirect
PyPIdify-trace-opik0.0.1indirect
PyPIdify-trace-tencent0.0.1indirect
PyPIdify-trace-weave0.0.1indirect
PyPIdify-vdb-alibabacloud-mysql0.0.1indirect
PyPIdify-vdb-analyticdb0.0.1indirect
PyPIdify-vdb-baidu0.0.1indirect
PyPIdify-vdb-chroma0.0.1indirect
PyPIdify-vdb-clickzetta0.0.1indirect
PyPIdify-vdb-couchbase0.0.1indirect
PyPIdify-vdb-elasticsearch0.0.1indirect
PyPIdify-vdb-hologres0.0.1indirect
PyPIdify-vdb-huawei-cloud0.0.1indirect
PyPIdify-vdb-iris0.0.1indirect
PyPIdify-vdb-lindorm0.0.1indirect
PyPIdify-vdb-matrixone0.0.1indirect
PyPIdify-vdb-milvus0.0.1indirect
PyPIdify-vdb-myscale0.0.1indirect
PyPIdify-vdb-oceanbase0.0.1indirect
PyPIdify-vdb-opengauss0.0.1indirect
PyPIdify-vdb-opensearch0.0.1indirect
PyPIdify-vdb-oracle0.0.1indirect
PyPIdify-vdb-pgvecto-rs0.0.1indirect
PyPIdify-vdb-pgvector0.0.1indirect
PyPIdify-vdb-qdrant0.0.1indirect
PyPIdify-vdb-relyt0.0.1indirect
PyPIdify-vdb-tablestore0.0.1indirect
PyPIdify-vdb-tencent0.0.1indirect
PyPIdify-vdb-tidb-on-qdrant0.0.1indirect
PyPIdify-vdb-tidb-vector0.0.1indirect
PyPIdify-vdb-upstash0.0.1indirect
PyPIdify-vdb-vastbase0.0.1indirect
PyPIdify-vdb-vikingdb0.0.1indirect
PyPIdify-vdb-weaviate0.0.1indirect
PyPIdiskcache-weave5.6.3.post1indirect
PyPIdistro1.9.0indirect
PyPIdocker7.1.0indirect
PyPIdockerfile-parse2.0.1indirect
PyPIdocstring-parser0.17.0indirect
PyPIdocstring-parser0.18.0indirect
PyPIdotenv-linter0.9.0indirect
PyPIdurationpy0.10indirect
PyPIe2b2.46.4indirect
PyPIelastic-transport8.17.1indirect
PyPIelasticsearch8.14.0indirect
PyPIemoji2.15.0indirect
PyPIesdk-obs-python3.26.6indirect
PyPIet-xmlfile2.0.0indirect
PyPIevents0.5indirect
PyPIexecnet2.1.2indirect
PyPIexecuting2.2.1indirect
PyPIfaker40.38.0indirect
PyPIfastapi0.135.1indirect
PyPIfastapi0.136.0indirect
PyPIfastuuid0.14.0indirect
PyPIfickling0.1.12indirect
PyPIfilelock3.20.3indirect
PyPIfilelock3.29.0indirect
PyPIfiletype1.2.0indirect
PyPIflask-sqlalchemy3.1.1indirect
PyPIflatbuffers25.9.23indirect
PyPIfrozenlist1.8.0indirect
PyPIfsspec2025.10.0indirect
PyPIfsspec2026.3.0indirect
PyPIfuture1.0.0indirect
PyPIgenai-prices0.1.3indirect
PyPIghp-import2.1.0indirect
PyPIgitdb4.0.12indirect
PyPIgitpython3.1.59indirect
PyPIgoogle3.0.0indirect
PyPIgoogle-api-core2.30.3indirect
PyPIgoogle-auth2.49.2indirect
PyPIgoogle-auth-httplib20.3.1indirect
PyPIgoogle-cloud-bigquery3.30.0indirect
PyPIgoogle-cloud-core2.5.0indirect
PyPIgoogle-cloud-resource-manager1.15.0indirect
PyPIgoogle-cloud-storage3.13.1indirect
PyPIgoogle-crc32c1.7.1indirect
PyPIgoogle-genai1.72.0indirect
PyPIgoogle-genai1.73.1indirect
PyPIgoogle-resumable-media2.8.0indirect
PyPIgoogleapis-common-protos1.74.0indirect
PyPIgoogleapis-common-protos1.75.0indirect
PyPIgql4.0.0indirect
PyPIgraphql-core3.2.7indirect
PyPIgraphviz0.21indirect
PyPIgreenlet3.2.4indirect
PyPIgriffelib2.0.2indirect
PyPIgrimp3.14indirect
PyPIgrpc-google-iam-v10.14.3indirect
PyPIgrpcio1.76.0indirect
PyPIgrpcio1.83.0indirect
PyPIgrpcio-status1.62.3indirect
PyPIgrpcio-tools1.71.2indirect
PyPIh110.16.0indirect
PyPIh24.4.1indirect
PyPIhf-xet1.3.2indirect
PyPIhf-xet1.4.3indirect
PyPIhiredis3.3.0indirect
PyPIholo-search-sdk0.4.2indirect
PyPIhpack4.2.0indirect
PyPIhtml5lib1.1indirect
PyPIhttpcore1.0.9indirect
PyPIhttpcore22.12.0indirect
PyPIhttplib20.32.0indirect
PyPIhttptools0.7.1indirect
PyPIhttpx2-jsfetch1.0indirect
PyPIhuggingface-hub1.11.0indirect
PyPIhuggingface-hub1.6.0indirect
PyPIhumanfriendly10.0indirect
PyPIhyperframe6.1.0indirect
PyPIhypothesis6.167.1indirect
PyPIidna3.18indirect
PyPIimport-linter2.14indirect
PyPIimportlib-metadata8.5.0indirect
PyPIimportlib-resources6.5.2indirect
PyPIiniconfig2.3.0indirect
PyPIinstaller0.7.0indirect
PyPIintersystems-irispython—indirect
PyPIintersystems-irispython5.4.0indirect
PyPIintervaltree3.1.0indirect
PyPIisodate0.7.2indirect
PyPIitsdangerous2.2.0indirect
PyPIjieba0.42.1indirect
PyPIjinja23.1.6indirect
PyPIjiter0.12.0indirect
PyPIjiter0.14.0indirect
PyPIjmespath0.10.0indirect
PyPIjoblib1.5.2indirect
PyPIjsonschema4.23.0indirect
PyPIjsonschema4.26.0indirect
PyPIjsonschema-specifications2025.9.1indirect
PyPIjwcrypto1.5.7indirect
PyPIkaitaistruct0.11indirect
PyPIkombu5.6.2indirect
PyPIkubernetes33.1.0indirect
PyPIlangdetect1.0.9indirect
PyPIlangfuse—indirect
PyPIlangfuse4.2.0indirect
PyPIlangsmith0.8.18indirect
PyPIlangsmith0.8.5indirect
PyPIlark1.3.1indirect
PyPIlibrt0.15.0indirect
PyPIlitellm1.89.3indirect
PyPIllvmlite0.47.0indirect
PyPIlogfire4.37.0indirect
PyPIlogfire-api4.32.1indirect
PyPIlxml6.1.0indirect
PyPIlxml-stubs0.5.1indirect
PyPIlz44.4.5indirect
PyPImako1.3.12indirect
PyPImarkdown3.10.2indirect
PyPImarkdown-it-py4.0.0indirect
PyPImarkupsafe3.0.3indirect
PyPImdurl0.1.2indirect
PyPImergedeep1.3.4indirect
PyPImkdocs1.6.1indirect
PyPImkdocs-autorefs1.4.4indirect
PyPImkdocs-get-deps0.2.2indirect
PyPImkdocs-glightbox0.5.2indirect
PyPImkdocs-material9.7.7indirect
PyPImkdocs-material-extensions1.3.1indirect
PyPImkdocstrings1.0.4indirect
PyPImkdocstrings-python2.0.3indirect
PyPImlflow-skinny—indirect
PyPImlflow-skinny3.11.1indirect
PyPImmh35.2.0indirect
PyPImo-vector0.1.13indirect
PyPImpmath1.3.0indirect
PyPImsal1.35.1indirect
PyPImsal-extensions1.3.1indirect
PyPImultidict6.7.0indirect
PyPImurmurhash1.0.15indirect
PyPImypy2.3.1indirect
PyPImypy-boto3-bedrock-runtime1.43.0indirect
PyPImypy-extensions1.1.0indirect
PyPImysql-connector-python—indirect
PyPImysql-connector-python26.7.0indirect
PyPInetworkx3.6indirect
PyPInh30.3.7indirect
PyPInltk3.10.3indirect
PyPInumba0.65.0indirect
PyPInumba0.65.1indirect
PyPInumpy2.4.4indirect
PyPInumpy-typing-compat20251206.2.4indirect
PyPIoauthlib3.3.1indirect
PyPIodfpy1.4.1indirect
PyPIolefile0.47indirect
PyPIonnxruntime1.23.2indirect
PyPIopenai2.24.0indirect
PyPIopenai2.54.0indirect
PyPIopendal0.46.0indirect
PyPIopeninference-instrumentation0.1.42indirect
PyPIopeninference-semantic-conventions0.1.25indirect
PyPIopenpyxl3.1.5indirect
PyPIopensearch-protobufs0.19.0indirect
PyPIopensearch-py3.1.0indirect
PyPIopenshell0.0.110indirect
PyPIopentelemetry-api—indirect
PyPIopentelemetry-api1.42.1indirect
PyPIopentelemetry-api1.44.0indirect
PyPIopentelemetry-exporter-otlp1.44.0indirect
PyPIopentelemetry-exporter-otlp-proto-common1.42.1indirect
PyPIopentelemetry-exporter-otlp-proto-common1.44.0indirect
PyPIopentelemetry-exporter-otlp-proto-grpc—indirect
PyPIopentelemetry-exporter-otlp-proto-grpc1.44.0indirect
PyPIopentelemetry-exporter-otlp-proto-http1.42.1indirect
PyPIopentelemetry-exporter-otlp-proto-http1.44.0indirect
PyPIopentelemetry-instrumentation0.63b1indirect
PyPIopentelemetry-instrumentation0.65b0indirect
PyPIopentelemetry-instrumentation-asgi0.63b1indirect
PyPIopentelemetry-instrumentation-asgi0.65b0indirect
PyPIopentelemetry-instrumentation-fastapi0.63b1indirect
PyPIopentelemetry-instrumentation-fastapi0.65b0indirect
PyPIopentelemetry-instrumentation-wsgi0.65b0indirect
PyPIopentelemetry-proto1.42.1indirect
PyPIopentelemetry-proto1.44.0indirect
PyPIopentelemetry-sdk—indirect
PyPIopentelemetry-sdk1.42.1indirect
PyPIopentelemetry-sdk1.44.0indirect
PyPIopentelemetry-semantic-conventions—indirect
PyPIopentelemetry-semantic-conventions0.63b1indirect
PyPIopentelemetry-semantic-conventions0.65b0indirect
PyPIopentelemetry-util-http0.63b1indirect
PyPIopentelemetry-util-http0.65b0indirect
PyPIopik—indirect
PyPIopik1.11.2indirect
PyPIoptype0.17.0indirect
PyPIoracledb4.0.2indirect
PyPIorjson3.11.6indirect
PyPIorjson3.11.8indirect
PyPIoss22.19.1indirect
PyPIoverrides7.7.0indirect
PyPIpackaging25.0indirect
PyPIpackaging26.0indirect
PyPIpaginate0.5.7indirect
PyPIpandas3.0.2indirect
PyPIpandas-stubs3.0.5.260730indirect
PyPIpathspec1.0.4indirect
PyPIpathspec1.1.1indirect
PyPIpdfminer-six20251230indirect
PyPIpgvecto-rs0.2.2indirect
PyPIpgvector0.5.0indirect
PyPIpillow12.3.0indirect
PyPIplatformdirs4.5.0indirect
PyPIplatformdirs4.9.6indirect
PyPIpluggy1.6.0indirect
PyPIpolyfile-weave0.5.9indirect
PyPIportalocker2.10.1indirect
PyPIpostgrest2.31.0indirect
PyPIposthog7.0.1indirect
PyPIpreshed3.0.12indirect
PyPIpreshed3.0.13indirect
PyPIprompt-toolkit3.0.52indirect
PyPIpropcache0.4.1indirect
PyPIproto-plus1.26.1indirect
PyPIprotobuf5.29.6indirect
PyPIprotobuf6.33.6indirect
PyPIprotobuf-py0.1.1indirect
PyPIprotobuf-py-ext0.1.1indirect
PyPIpsutil7.2.2indirect
PyPIpsycopg3.3.3indirect
PyPIpsycopg-binary3.3.3indirect
PyPIpy1.11.0indirect
PyPIpy-cpuinfo210.1.1indirect
PyPIpyarrow23.0.1indirect
PyPIpyasn10.6.4indirect
PyPIpyasn1-modules0.4.2indirect
PyPIpycparser2.23indirect
PyPIpycparser3.0indirect
PyPIpycryptodome3.23.0indirect
PyPIpydantic-core2.41.5indirect
PyPIpydantic-extra-types2.11.1indirect
PyPIpydantic-graph2.31.0indirect
PyPIpydantic-settings2.14.0indirect
PyPIpydantic-settings2.14.2indirect
PyPIpygments2.20.0indirect
PyPIpyjwt2.13.0indirect
PyPIpymdown-extensions11.0.1indirect
PyPIpymilvus—indirect
PyPIpymilvus2.6.12indirect
PyPIpymochow2.4.1indirect
PyPIpymysql1.1.2indirect
PyPIpyobvector0.2.25indirect
PyPIpypandoc1.17indirect
PyPIpypandoc-binary1.17indirect
PyPIpyparsing3.2.5indirect
PyPIpypdf6.16.1indirect
PyPIpypdfium25.6.0indirect
PyPIpypdfium25.7.1indirect
PyPIpypika0.48.9indirect
PyPIpyproject-hooks1.2.0indirect
PyPIpyqwest0.10.0indirect
PyPIpyreadline33.5.4indirect
PyPIpyrefly1.2.0indirect
PyPIpytest9.0.3indirect
PyPIpytest9.1.1indirect
PyPIpytest-benchmark5.3.0indirect
PyPIpytest-cov7.1.0indirect
PyPIpytest-env1.7.0indirect
PyPIpytest-examples0.0.18indirect
PyPIpytest-mock3.15.1indirect
PyPIpytest-timeout2.4.0indirect
PyPIpytest-xdist3.8.0indirect
PyPIpython-calamine0.6.2indirect
PyPIpython-calamine0.8.2indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpython-docx1.2.0indirect
PyPIpython-dotenv1.2.2indirect
PyPIpython-engineio4.13.3indirect
PyPIpython-http-client3.3.7indirect
PyPIpython-iso6392026.1.31indirect
PyPIpython-iso6392026.4.20indirect
PyPIpython-magic0.4.27indirect
PyPIpython-oxmsg0.0.2indirect
PyPIpython-pptx1.0.2indirect
PyPIpytokens0.4.1indirect
PyPIpytz2025.2indirect
PyPIpywin32311indirect
PyPIpyxlsb1.0.10indirect
PyPIpyyaml6.0.3indirect
PyPIpyyaml-env-tag1.1indirect
PyPIqdrant-client1.9.0indirect
PyPIrapidfuzz3.14.3indirect
PyPIrapidfuzz3.14.5indirect
PyPIrealtime2.31.0indirect
PyPIreferencing0.37.0indirect
PyPIregex2025.11.3indirect
PyPIregex2026.4.4indirect
PyPIrequests2.33.1indirect
PyPIrequests2.34.2indirect
PyPIrequests-oauthlib2.0.0indirect
PyPIrequests-toolbelt1.0.0indirect
PyPIretry0.9.2indirect
PyPIrich14.2.0indirect
PyPIrich15.0.0indirect
PyPIrpds-py0.29.0indirect
PyPIrpds-py0.30.0indirect
PyPIruff0.15.11indirect
PyPIruff0.16.6indirect
PyPIs3transfer0.19.1indirect
PyPIsafetensors0.7.0indirect
PyPIsafetensors0.8.0indirect
PyPIscipy-stubs1.18.1.0indirect
PyPIselectolax0.4.8indirect
PyPIsentry-sdk2.57.0indirect
PyPIsetuptools80.10.2indirect
PyPIsetuptools82.0.1indirect
PyPIshellingham1.5.4indirect
PyPIsimple-websocket1.1.0indirect
PyPIsix1.17.0indirect
PyPIsmart-open7.5.1indirect
PyPIsmart-open7.6.0indirect
PyPIsmmap5.0.2indirect
PyPIsniffio1.3.1indirect
PyPIsocksio1.0.0indirect
PyPIsortedcontainers2.4.0indirect
PyPIsoupsieve2.8.4indirect
PyPIsoupsieve2.9.1indirect
PyPIspacy3.8.11indirect
PyPIspacy3.8.14indirect
PyPIspacy-legacy3.0.12indirect
PyPIspacy-loggers1.0.5indirect
PyPIsqlalchemy2.0.49indirect
PyPIsqlglot28.0.0indirect
PyPIsqlparse0.6.0indirect
PyPIsrsly2.5.2indirect
PyPIsrsly2.5.3indirect
PyPIstarlette1.3.1indirect
PyPIstorage32.31.0indirect
PyPIstrenum0.4.15indirect
PyPIsupabase2.31.0indirect
PyPIsupabase-auth2.31.0indirect
PyPIsupabase-functions2.31.0indirect
PyPIsympy1.14.0indirect
PyPItablestore6.4.8indirect
PyPItcvdb-text1.1.2indirect
PyPItcvectordb—indirect
PyPItcvectordb2.1.1indirect
PyPItenacity—indirect
PyPItenacity8.5.0indirect
PyPItenacity9.1.4indirect
PyPItestcontainers4.14.2indirect
PyPIthinc8.3.10indirect
PyPIthinc8.3.13indirect
PyPItidb-vector0.0.15indirect
PyPItiktoken0.12.0indirect
PyPItokenizers0.22.2indirect
PyPItokenizers0.23.2indirect
PyPItoml0.10.2indirect
PyPItos2.9.2indirect
PyPItqdm4.67.3indirect
PyPItransformers5.10.1indirect
PyPItransformers5.16.1indirect
PyPItruststore0.10.4indirect
PyPItyper0.16.1indirect
PyPItyper-slim0.21.2indirect
PyPItypes-aiofiles25.1.0.20260518indirect
PyPItypes-awscrt0.29.0indirect
PyPItypes-beautifulsoup44.12.0.20250516indirect
PyPItypes-bleach6.4.0.20260728indirect
PyPItypes-cachetools7.0.0.20260713indirect
PyPItypes-cffi2.1.0.20260827indirect
PyPItypes-colorama0.4.15.20260508indirect
PyPItypes-croniter6.2.4.20260711indirect
PyPItypes-defusedxml0.7.0.20260504indirect
PyPItypes-deprecated1.3.1.20260728indirect
PyPItypes-docutils0.23.0.20260827indirect
PyPItypes-flask-cors6.0.3.20260712indirect
PyPItypes-flask-migrate4.1.0.20260508indirect
PyPItypes-gevent26.8.0.20260811indirect
PyPItypes-greenlet3.5.0.20260518indirect
PyPItypes-html5lib1.1.11.20260518indirect
PyPItypes-jmespath1.1.0.20260724indirect
PyPItypes-markdown3.10.2.20260712indirect
PyPItypes-oauthlib3.3.0.20260724indirect
PyPItypes-objgraph3.6.0.20260508indirect
PyPItypes-olefile0.47.0.20260508indirect
PyPItypes-openpyxl3.1.5.20260827indirect
PyPItypes-pexpect4.9.0.20260518indirect
PyPItypes-protobuf7.35.1.20260827indirect
PyPItypes-psutil7.2.2.20260827indirect
PyPItypes-psycopg22.9.21.20260724indirect
PyPItypes-pygments2.21.0.20260819indirect
PyPItypes-pymysql1.2.0.20260807indirect
PyPItypes-pyopenssl24.1.0.20240722indirect
PyPItypes-python-dateutil2.9.0.20260807indirect
PyPItypes-python-http-client3.3.7.20260518indirect
PyPItypes-pytz2026.3.1.20260727indirect
PyPItypes-pywin32312.0.0.20260827indirect
PyPItypes-pyyaml6.0.12.20260815indirect
PyPItypes-redis4.6.0.20241004indirect
PyPItypes-regex2026.9.3.20260903indirect
PyPItypes-s3transfer0.15.0indirect
PyPItypes-setuptools84.0.0.20260812indirect
PyPItypes-shapely2.1.0.20260728indirect
PyPItypes-simplejson4.1.0.20260724indirect
PyPItypes-six1.17.0.20260724indirect
PyPItypes-tensorflow2.18.0.20260827indirect
PyPItypes-tqdm4.70.0.20260827indirect
PyPItypes-ujson5.10.0.20250822indirect
PyPItypes-webencodings0.5.0.20251108indirect
PyPItyping-inspection0.4.2indirect
PyPItzdata2025.2indirect
PyPItzdata2026.1indirect
PyPItzlocal5.3.1indirect
PyPIujson5.13.0indirect
PyPIunstructured0.24.0indirect
PyPIunstructured0.27.5indirect
PyPIunstructured-client0.42.4indirect
PyPIunstructured-client0.43.2indirect
PyPIupstash-vector0.8.0indirect
PyPIuritemplate4.2.0indirect
PyPIurllib32.7.0indirect
PyPIuuid-utils0.14.1indirect
PyPIuuid62025.0.1indirect
PyPIuvicorn0.38.0indirect
PyPIuvicorn0.46.0indirect
PyPIuvloop0.22.1indirect
PyPIvalidators0.35.0indirect
PyPIvine5.1.0indirect
PyPIvolcengine-compat—indirect
PyPIvolcengine-compat1.0.156indirect
PyPIwandb0.28.2indirect
PyPIwasabi1.1.3indirect
PyPIwatchdog6.0.0indirect
PyPIwatchfiles1.1.1indirect
PyPIwcmatch10.2.1indirect
PyPIwcwidth0.2.14indirect
PyPIweasel0.4.3indirect
PyPIweasel1.0.0indirect
PyPIweave0.52.36indirect
PyPIweaviate-client4.22.0indirect
PyPIwebencodings0.5.1indirect
PyPIwebsocket-client1.9.0indirect
PyPIwebsockets15.0.1indirect
PyPIwebsockets16.0indirect
PyPIwebvtt-py0.5.1indirect
PyPIwerkzeug3.1.6indirect
PyPIwrapt2.4.0indirect
PyPIwsproto1.3.2indirect
PyPIxinference-client2.7.0indirect
PyPIxlrd2.0.2indirect
PyPIxlsxwriter3.2.9indirect
PyPIxmltodict1.0.2indirect
PyPIxxhash3.6.0indirect
PyPIyarl1.23.0indirect
PyPIzipp3.23.0indirect
PyPIzope-event6.1indirect
PyPIzope-interface8.1.1indirect
Dependency advisories 36

This repository publishes no package the index resolves, so its own dependency graph was assessed — 841 packages, which also include development and test pins that never ship: 36 carry known advisories, of which 14 are direct. 15 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

PackageVersionRelationSeverityAdvisoriesFixed in
@orpc/clientcatalog:directcritical11.13.6
dompurifycatalog:directcritical223.4.13
opencatalog:directcritical16.0.0
@vitejs/plugin-rsccatalog:indirectcritical70.5.26
happy-domcatalog:indirectcritical320.8.9
uglify-jscatalog:indirectcritical22.7.2
vite-pluscatalog:indirectcritical48.0.16
vitestcatalog:indirectcritical24.1.0
js-cookiecatalog:directhigh13.0.7
mermaidcatalog:directhigh1011.16.1
mimecatalog:directhigh12.0.3
negotiatorcatalog:directhigh10.6.1
qscatalog:directhigh56.14.1
undicicatalog:directhigh228.9.0
uuidcatalog:directhigh113.0.1
@hono/node-servercatalog:indirecthigh32.0.5
@tanstack/form-corecatalog:indirecthigh10.42.1
chromadb0.5.20indirecthigh6—
couchbase4.6.2indirecthigh1—
guzzlehttp/guzzle7.9.2indirecthigh98.0.1
honocatalog:indirecthigh404.13.5
langsmith0.8.5indirecthigh10.8.18
nltk3.10.3indirecthigh1—
playwrightcatalog:indirecthigh11.55.1
postcsscatalog:indirecthigh68.5.23
vitecatalog:indirecthigh168.0.16
echartscatalog:directmoderate16.1.0
i18nextcatalog:directmoderate11.10.3
js-yamlcatalog:directmoderate54.2.0
zodcatalog:directmoderate13.22.3
@hey-api/openapi-tscatalog:indirectmoderate10.97.3
guzzlehttp/psr72.7.1indirectmoderate42.12.3
pydantic-settings2.14.0indirectmoderate12.14.2
setuptools80.10.2indirectmoderate283.0.0
setuptools82.0.1indirectmoderate283.0.0
golang.org/x/modv0.35.0indirectunknown21.27.0-rc.3

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable

Feedback

Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.

The message is kept through sign-in.

Related records

Inspected repositories sharing catalogue tags or ecosystems with langgenius/dify. Read them side by side →

98ModelEngine-Group/nexentNexent is a zero-code platform for auto-generating production-grade AI agents using Harness Engineering principles — unified tools, skills, memory, and orchestration with built-in constraints, feedback loops, and control planes.Exceptional99ag2ai/ag2AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3xExceptional98strands-agents/toolsA set of tools that gives agents powerful capabilities.Exceptional100deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Exceptional98bytedance/deer-flowAn open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories, tools, skill, subagents and message gateway, it handles different levels of tasks that could take minutes to hours.Exceptional98langwatch/langwatchThe platform for LLM evaluations and AI agent testingExceptional

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — Go.