
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
open-deep-research
Advanced tools
Deep research has broken out as one of the most popular agent applications. This is a simple, configurable, fully open source deep research agent that works across many model providers, search tools, and MCP servers.
git clone https://github.com/langchain-ai/open_deep_research.git
cd open_deep_research
uv venv
source .venv/bin/activate # On Windows: .venv\Scripts\activate
uv pip install -r pyproject.toml
.env file to customize the environment variables (for model selection, search tools, and other configuration settings):cp .env.example .env
# Install dependencies and start the LangGraph server
uvx --refresh --from "langgraph-cli[inmem]" --with-editable . --python 3.11 langgraph dev --allow-blocking
Use this to open the Studio UI:
- 🚀 API: http://127.0.0.1:2024
- 🎨 Studio UI: https://smith.langchain.com/studio/?baseUrl=http://127.0.0.1:2024
- 📚 API Docs: http://127.0.0.1:2024/docs
Ask a question in the messages input field and click Submit.
Open Deep Research offers extensive configuration options to customize the research process and model behavior. All configurations can be set via the web UI, environment variables, or by modifying the configuration directly.
Open Deep Research uses multiple specialized models for different research tasks:
openai:gpt-4.1-nano): Summarizes research results from search APIsopenai:gpt-4.1): Conducts research and analysisopenai:gpt-4.1-mini): Compresses research findings from sub-agentsopenai:gpt-4.1): Writes the final comprehensive reportAll models are configured using init_chat_model() API which supports providers like OpenAI, Anthropic, Google Vertex AI, and others.
Important Model Requirements:
Structured Outputs: All models must support structured outputs. Check support here.
Search API Compatibility: Research and Compression models must support your selected search API:
Tool Calling: All models must support tool calling functionality
Special Configurations:
Open Deep Research supports MCP servers to extend research capabilities.
Filesystem MCP Server provides secure file system operations with robust access control:
Example usage:
mcp-server-filesystem /path/to/allowed/dir1 /path/to/allowed/dir2
Remote MCP servers enable distributed agent coordination and support streamable HTTP requests. Unlike local servers, they can be multi-tenant and require more complex authentication.
Arcade MCP Server Example:
{
"url": "https://api.arcade.dev/v1/mcps/ms_0ujssxh0cECutqzMgbtXSGnjorm",
"tools": ["Search_SearchHotels", "Search_SearchOneWayFlights", "Search_SearchRoundtripFlights"]
}
Remote servers can be configured as authenticated or unauthenticated and support JWT-based authentication through OAuth endpoints.
A comprehensive batch evaluation system designed for detailed analysis and comparative studies.
# Run comprehensive evaluation on LangSmith datasets
python tests/run_evaluate.py
tests/run_evaluate.py: Main evaluation scripttests/evaluators.py: Specialized evaluator functionstests/prompts.py: Evaluation prompts for each dimensionFollow the quickstart to start LangGraph server locally and test the agent out on LangGraph Studio.
You can easily deploy to LangGraph Platform.
Open Agent Platform (OAP) is a UI from which non-technical users can build and configure their own agents. OAP is great for allowing users to configure the Deep Researcher with different MCP tools and search APIs that are best suited to their needs and the problems that they want to solve.
We've deployed Open Deep Research to our public demo instance of OAP. All you need to do is add your API Keys, and you can test out the Deep Researcher for yourself! Try it out here
You can also deploy your own instance of OAP, and make your own custom agents (like Deep Researcher) available on it to your users.
The src/legacy/ folder contains two earlier implementations that provide alternative approaches to automated research:
legacy/graph.py)legacy/multi_agent.py)See src/legacy/legacy.md for detailed documentation, configuration options, and usage examples for both legacy implementations.
FAQs
Planning, research, and report generation.
We found that open-deep-research demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.