Is LangChain Still Maintained? Live GitHub Status
LangChain is a framework for building LLM applications, with integrations for models, vector stores and tools.
Short answer: Yes, it is actively maintained. Health score 93/100. Checked 18 Oct 2026.
What the numbers say
LangChain’s master branch received 553 commits in the last 91 days, against 797 in the same 91 days a year earlier (−31%). Activity is at least half of last year’s pace and no maintenance notice was found, so the index labels it active. It has 148,040 stars on GitHub.
LangChain usage: downloads and installs
langchainTrend: the monthly download count is stored once a day, starting 17 Oct 2026. A chart appears here after a week of readings.
Download and pull counts include automated installs from CI pipelines, containers and mirrors, so they show how widely the software is pulled, not how many people use it. Numbers from different registries are not comparable with each other. Sources: PyPI download statistics via ecosyste.ms, read 18 Oct 2026, 14:54 UTC.
LangChain security practices and adoption
Security practices
OpenSSF Scorecard, an automated review of how the repository is run
- Code review3/10
- Branch protection3/10
- Dangerous workflow10/10
- Pinned dependencies8/10
- Security policy9/10
All 14 checks
- Maintained10/10
- Token permissions0/10
- Binary artifacts10/10
- OpenSSF Best Practices badge0/10
- License10/10
- Fuzzing0/10
- Signed releases0/10
- Packaging10/10
- Static analysis (SAST)9/10
Full report, run 12 Oct 2026
Used by other projects
deps.dev: PyPI packages that depend on langchain 1.4.6
- Indirect dependents620
- All dependents3,106
- RegistryPyPI
Latest release
GitHub: files attached to the latest release and how often they were downloaded
- Versionlangchain-core==1.6.12
- Published16 Oct 2026
- Downloads of its 2 files16
- Contributors467
Scorecard checks security practices such as code review, branch protection and pinned dependencies; it does not find bugs, and a low score does not mean the software is unsafe. Dependents and download counts show reach, not quality. Sources: OpenSSF Scorecard, deps.dev, GitHub, read 18 Oct 2026, 15:31 UTC.
Health score breakdown
| Part | Points | Based on |
|---|---|---|
| Activity | 34.6 / 35 | 553 commits in the last 91 days (full marks at 600) |
| Trend | 13.9 / 20 | 69% of last year’s pace (full marks at 100%) |
| Recency | 15.0 / 15 | last commit 2 days ago |
| Releases | 10.0 / 10 | latest GitHub release 2 days ago |
| Community | 20.0 / 20 | 555 pull requests merged in the last 91 days (full marks at 300) |
Open issues and pull requests: 658. The score summarises maintenance signals only, not quality or security. How the score works
LangChain: common questions
Is LangChain still maintained?
Yes. As of 18 October 2026, LangChain received 553 commits in the last 91 days and its latest commit is from 16 October 2026, and no maintenance notice was found. Its health score is 93 out of 100.
What is the latest LangChain release?
The latest GitHub release of LangChain is langchain-core==1.6.12, published on 16 October 2026.
How many people contribute to LangChain?
GitHub lists 467 contributors for LangChain. 555 pull requests were merged in the last 91 days.
What licence does LangChain use?
GitHub identifies the LangChain licence as MIT. Read the licence file before commercial use.
How many times is LangChain downloaded?
The langchain package on PyPI was downloaded 170,457,766 times in the last month, according to ecosyste.ms (checked 18 October 2026). The count includes automated installs from CI pipelines and mirrors, so it is not a count of users.
Is LangChain secure?
We cannot say whether the code is free of vulnerabilities. What can be measured is how the project is run: the OpenSSF Scorecard gives LangChain 5.9 out of 10 for security practices (run 12 October 2026), covering checks such as code review, branch protection and pinned dependencies. Read the full report and the project’s security policy before relying on it.
How is the health score calculated?
It adds five parts from public GitHub data: commit activity over 91 days (35 points), the trend against the same period last year (20), how recent the last commit is (15), how recent the last release is (10) and merged pull requests (20). Archived projects score 0; a maintenance notice caps the score at 25. It measures maintenance signals only, not code quality or security.
Visitor rating
Have you used LangChain? Rate it:
Ratings come from visitors, not from EvalAITools, and are not part of the health status above. One rating per visitor per tool every 30 days.
Daily snapshots
| Date (UTC) | Stars | Commits, last 91 days | Status |
|---|---|---|---|
| 18 Oct 2026 | 147,997 | 553 | Active |
| 17 Oct 2026 | 147,945 | 554 | Active |
| 16 Oct 2026 | 147,886 | 553 | Active |
One snapshot is stored per day, starting 16 October 2026. No status change has been recorded for LangChain since then.
Other rag frameworks
| Tool | Status | Stars | Commits (91d) | vs last year |
|---|---|---|---|---|
| LangChain | Active | 148k | 553 | −31% |
| RAGFlow | Active | 92.4k | 2,748 | +299% |
| Docling | Active | 69.1k | 465 | +266% |
| Mem0 | Active | 67.4k | 183 | +40% |
| AnythingLLM | Active | 67.3k | 318 | +221% |
| Pathway LLM App | Active | 58.8k | 5 | +67% |
| LlamaIndex | Slowing down | 52.6k | 105 | −71% |
| LightRAG | Active | 40.2k | 1,950 | +84% |
| Quivr | Active | 39.6k | 569 | — |
| Langchain-Chatchat | No recent commits | 38.7k | 0 | −100% |
| DSPy | Active | 38.7k | 188 | +13% |
| GraphRAG | Maintenance mode | 36.4k | 19 | −14% |
| cognee | Active | 32.5k | 2,651 | +107% |
| Graphiti | Active | 32.0k | 138 | 0% |
| Haystack | Active | 26.8k | 757 | +441% |
| Unstructured | Active | 15.6k | 55 | +206% |
| txtai | Active | 13.0k | 276 | +402% |
| Verba | Archived | 7.7k | 0 | — |
Alternatives to LangChain
Open-source alternatives to LangChain, ranked by live maintenance data →
Compare
Status badge
Show LangChain’s live maintenance status in a README. The badge updates with this page and links back to it.
[](https://evalaitools.com/tools/langchain/)Read next
How this is measured: commits on the repository’s default branch counted through the GitHub API, the last 91 days against the same 91 days a year earlier; archived flag and licence from the repository; README checked daily for maintenance notices. Commit counts measure activity, not quality, and we have not tested this tool ourselves for this page.