What LangChain's 267 Packages Actually Include
A sample of the transitive dependency categories. Every package here is a potential CVE, version conflict, and CI download.
Core functionality
Transitive/indirect
Historical CVEs
HTTP & Async ~12 packages
httpxhttpcoreaiohttpaiosignalfrozenlistanyiosniffioh11certificharset-normalizer
Data Validation & Serialization ~8 packages
pydanticpydantic-coreannotated-typesmarshmallowjsonschemajsonschema-specificationsreferencingrpds-py
Tokenization & Encoding ~6 packages
tiktokenregextokenizerstransformershuggingface-hubsafetensors
ML / Numeric ~9 packages
numpyscipyscikit-learnjoblibthreadpoolctlpillowfilelockfsspecpackaging
Retries, Logging, Utilities ~14 packages
tenacitybackoffstructlogrichclicktypertqdmcoloramapygmentsmarkdown-it-pymdurl
… and ~218 more DB drivers, cloud SDKs, parsers, loaders…
boto3google-authazure-corepymongoredisSQLAlchemypsycopg2unstructuredpypdfdocx2txt…
Overall Cold Start Scorecard
Ranked across all 5 metrics (1 = best). Lower total score = better cold start profile.
SynapseKit
7 pts
Best overall cold start
★★★★★
LangChain
9 pts
Best import time, heaviest install
★★★★★
LlamaIndex
14 pts
Worst on most metrics
★★★★★
www.engineersofai.com — AI Letters #10 · All benchmarks reproducible at kaggle.com/misternautiyal