Mar 20, 2026 at 6:31 AM 6 signals analysed No manual reviews · fully automatedTrust Signal Breakdown high 23 sub-signals across 6 dimensions
Vulnerability & Safety ×0.25 4.5 CVEs, dependency health, and supply chain integrity
2 of 3 sub-signals with data
Known CVEs 57% 4.3
5 CVE(s) found — 0 unpatched
via OSV.dev
Dependency Health no data —
Weight redistributed to sub-signals with data
Supply Chain 43% 4.8
15 transitive CVEs found (penalty: -0.25)
via npm provenance
Operational Reliability ×0.15 4.2 Uptime, latency, error rates, and incident history
4 of 4 sub-signals with data
Uptime 35% 5.0
99.90% over 1000 checks
via Health checks
Response Latency 25% 4.0
p99: 284ms, p50: 114ms
via Health checks
Error Rate 20% 4.0
0.10% error rate (1/1000)
via Health checks
Incident History 20% 3.0
2 incidents in last 90 days
via Incidents table
Maintenance Activity ×0.15 5.0 Commit recency, release cadence, issue response, CI/CD
3 of 4 sub-signals with data
Commit Recency 37% 5.0
via GitHub
Release Cadence 31% 5.0
via GitHub
Issue Response no data —
Weight redistributed to sub-signals with data
CI/CD Presence 31% 5.0
via GitHub Actions
Adoption ×0.15 4.5 Downloads, stars, dependents, and growth trajectory
2 of 4 sub-signals with data
Download Volume 55% 4.0
544,867 weekly downloads
via npm / PyPI
GitHub Stars 45% 5.0
130,274 stars
via GitHub
Dependent Packages no data —
Weight redistributed to sub-signals with data
Growth Trend no data —
Weight redistributed to sub-signals with data
Transparency ×0.15 4.5 License, documentation, security policy, changelog
4 of 4 sub-signals with data
Open Source 30% 5.0
Public repo with OSI-approved license (mit)
via GitHub
Documentation 25% 4.0
Good README (>2000 bytes with examples)
via GitHub
Security Policy 20% 5.0
SECURITY.md inherited from org .github repo
via GitHub
Changelog 25% 4.0
Releases exist but no CHANGELOG.md
via GitHub
Publisher Trust ×0.15 4.5 Track record, org maturity, community standing
4 of 4 sub-signals with data
Track Record 30% 5.0
Internal: 5.0 (14 services), External: 4.5 (17186 followers, 38585 stars)
via Fabric index
Org Maturity 30% 4.5
Organization, 3.1 years old
via GitHub
Community Standing 20% 5.0
230 public repositories
via GitHub
Cross-Platform 20% 3.0
Present on 2 platform(s): github, pypi
via Registry scan
About this scoreScored across 23 sub-signals in 6 dimensions Scoring engine v1 (beta) — actively being expanded Phase 1: Core sub-signal architecture (live) Phase 2: Permission scope & expanded collection (in progress)
Trust Assessment AI Assessment
langchain-experimental is an MIT-licensed framework published by LangChain that provides experimental features and extensions for the LangChain agent platform. The service shows strong operational stability and maintenance practices, with 521K weekly downloads indicating substantial production usage. The 5 known CVEs merit attention given the experimental nature of the codebase, and teams should evaluate whether cutting-edge features justify the inherent risks of pre-stable components in their threat model.
Generated by Fabric AI · Mar 4, 2026 at 10:51 PM
Service Health (30d)
99.90%
p50: 114ms · p99: 284ms
Avg Latency
123ms
averaged across 30d health checks
Weekly Downloads
544.9k
PyPI weekly
Transparency & Compliance 4/5 passed
Incidents & Alerts last 90 days
Score History 90 snapshots
Mar 4 Mar 5
Community & Ecosystem adoption signals
544.9k
Weekly Downloads
PyPI
Supply Chain & Dependencies trust chain
Showing 2 of 2 dependencies
Data Sources 6 indexed
◎
OSV.dev CVE database · vulnerability scanning for npm & PyPI packages
◈
GitHub API Commits, issues, releases, repo metadata, transparency checks
⬡
npm Registry Package metadata, weekly downloads, maintainers, dependencies
⬡
PyPI Package metadata, weekly downloads, dependency tree
△
HTTP Health Checks 15-min pings · uptime, latency, status monitoring
◎
PyPI Stats Download statistics and trends
Version History score per release
VERSION RELEASED SCORE DELTA
Showing 6 of 10 releases Show more →
Are you the publisher? Claim this profile to unlock deeper evaluation, real-time monitoring, and trust signals that help agents discover your service.
Claim Provider Report Issue
Share this Trust Score Generate a scorecard image optimised for X, LinkedIn and other social platforms.
⬇ Download Score Card