Skip to main content
FOSSA Logo
Skip to package details

langchain-core

PyPI144.8k GitHub stars

v1.6.0 · Aug 2026 · MIT (top-level declared license)

pip install langchain-core
  • No known CVEs
  • 169.5M downloads/mo
  • 301 versions

Description

The agent engineering platform.

Licenses

Declared license

MIT (top-level declared license of langchain-core)

Transitive dependency licenses

This package's dependency tree includes MPL-2.0 and 1 other copyleft license. MPL-2.0 may require you to publish changes to that component when you distribute.

LicenseCategoryDependencies
MITPermissive11 of 29
BSD-3-ClausePermissive6 of 29
Apache-2.0Permissive4 of 29
non-standardUnknown2 of 29
Apache-2.0 OR BSD-2-ClausePermissive1 of 29
Apache-2.0 OR MITPermissive1 of 29
BSD-2-ClausePermissive1 of 29
PSF-2.0Permissive1 of 29
MPL-2.0Weak copyleft1 of 29
MPL-2.0 AND (Apache-2.0 OR MIT)Weak copyleft1 of 29

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need langchain-core approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

No known CVEs across published versions

Version history

Published versions
VersionPublishedLicense
1.6.0Aug 2026MIT
1.5.6Aug 2026
1.5.5Aug 2026
1.5.4Aug 2026
1.5.3Jul 2026
1.5.2Jul 2026
1.5.1Jul 2026
1.5.0Jul 2026
1.4.9Jul 2026
1.4.8Jun 2026
1.4.7Jun 2026
1.4.6Jun 2026
1.4.5Jun 2026
1.4.4Jun 2026
1.4.3Jun 2026
1.4.2Jun 2026
1.4.1Jun 2026
1.4.0May 2026
0.3.86May 2026
0.3.85May 2026
1.3.3May 2026
1.3.2Apr 2026
1.3.1Apr 2026
1.3.0Apr 2026
1.2.31Apr 2026
25 older releases
Older published versions
VersionPublishedLicense
1.2.30Apr 2026
1.2.29Apr 2026
0.3.84Apr 2026
1.2.28Apr 2026
1.2.27Apr 2026
1.2.26Apr 2026
1.2.25Apr 2026
1.2.24Apr 2026
1.2.23Mar 2026
1.2.22Mar 2026
1.2.21Mar 2026
1.2.20Mar 2026
1.2.19Mar 2026
1.2.18Mar 2026
1.2.17Mar 2026
1.2.16Feb 2026
1.2.15Feb 2026
1.2.14Feb 2026
1.2.13Feb 2026
1.2.12Feb 2026
1.2.11Feb 2026
1.2.10Feb 2026
1.2.9Feb 2026
1.2.8Feb 2026
0.3.83Jan 2026

Latest pre-release: 1.4.0a2 (May 2026). Pre-releases (canary, beta, release candidate and similar) are not listed.

pip install langchain-core resolves to the 1.x line today. Older major lines may still receive fixes.

Dependencies

Direct dependencies

10 direct dependencies, 29 in total including transitive. Licenses across the full tree are summarized under Licenses.

Direct dependencies
PackageVersion rangeLicense
httpx<1.0.0,>=0.23.0BSD-3-Clause
jsonpatch<2.0.0,>=1.33.0Unresolved in metadata
langchain-protocol>=0.0.17MIT
langsmith<1.0.0,>=0.3.45MIT
packaging>=23.2.0Apache-2.0 OR BSD-2-Clause
pydantic<3.0.0,>=2.7.4MIT
pyyaml<7.0.0,>=5.3.0MIT
tenacity!=8.4.0,<10.0.0,>=8.1.0Apache-2.0
typing-extensions<5.0.0,>=4.7.0PSF-2.0
uuid-utils<1.0,>=0.12.0BSD-3-Clause

Dependents

Based on what each package declares in its published metadata. The dependencies your build actually installs can differ, and a FOSSA scan of your project resolves the full tree.

Popularity

Downloads last month
169.5M
Known dependents in this corpus
5,660
GitHub stars
144.8k
OpenSSF score
5.9 / 10

FAQ

What is the latest version of langchain-core?
The latest version of langchain-core is 1.6.0, published August 2026.
What license is langchain-core under?
langchain-core declares MIT as its top-level declared license. Its dependency tree spans 10 distinct licenses.
Does langchain-core have known vulnerabilities?
No known CVEs are recorded against published versions of langchain-core.
How do I install langchain-core?
Install langchain-core with pip install langchain-core.
How do I generate an SBOM that includes langchain-core?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes langchain-core. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Download counts from PyPI Stats, sourced from the Python Software Foundation download statistics. Counts cover the last 180 days and exclude known mirrors.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.