PkgRadar

PyPI · pypi.org

langgraph-api

Remote Payload: matched "github.com/cloudflare/cloudflared/releases/download"

Why PkgRadar flagged 0.9.0

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/cloudflare/cloudflared/releases/download" · langgraph_api-0.9.0/langgraph_api/tunneling/cloudflare.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.11.0rc1Low risk02026-06-16
0.12.0.dev4Low risk02026-06-16
0.12.0.dev3Low risk02026-06-15
0.12.0.dev2Low risk02026-06-12
0.12.0.dev1Low risk02026-06-11
0.10.0Low risk02026-06-11
0.11.0.dev10Low risk02026-06-11
0.11.0.dev9Low risk02026-06-10
0.11.0.dev8Low risk02026-06-09
0.11.0.dev7Low risk02026-06-08
0.11.0.dev6Low risk02026-06-08
0.10.0rc3Low risk02026-06-05
0.11.0.dev5Low risk02026-06-05
0.11.0.dev4Low risk02026-06-05
0.11.0.dev3Low risk02026-06-04
0.11.0.dev1Low risk02026-06-03
0.10.0rc2Low risk02026-06-02
0.10.0rc1Low risk02026-06-01
0.9.0Review62026-05-27

Block this in CI

PkgRadar gates langgraph-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi langgraph-api==0.9.0
Start free — 25 scans / moView full evidence