Codejam Code Based Agents
by SAP-samplesLearn how to write code-based agents using Python, JavaScript and well-known industry standard frameworks. Learn how to deploy your code-based agent to SAP BTP, Kyma runtime, orchestrate them using Joule and integrate into the SAP ecosystem.
Codejam Code Based Agents is an open-source ai agent by SAP-samples, written mainly in Python, with 69 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 92164ba. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
92164ba · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Passed. This check ran and found nothing it flags.Static code scanpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit215 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (28)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.15.0: 72 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +67 more
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.4: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 2 known vulnerabilitiesGHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.5.18: 2 known vulnerabilitiesGHSA-3644-q5cj-c5c7, GHSA-rr7j-v2q5-chgv
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.4.0: 24 known vulnerabilitiesGHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +19 more
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@13.0.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
project/JavaScript/solution/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
project/JavaScript/starter-project/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.5.21: 1 known vulnerabilityGHSA-3644-q5cj-c5c7
project/JavaScript/starter-project/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sap-ai-sdk-base@3.4.0: 2 known vulnerabilitiesPYSEC-2023-315, PYSEC-2023-315
project/Python-LangGraph/solution/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 2 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844
project/Python-LangGraph/solution/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 10 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +5 more
project/Python-LangGraph/solution/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.3.9: 4 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240, PYSEC-2026-2575, PYSEC-2026-4240
project/Python-LangGraph/solution/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tqdm@4.9.0: 4 known vulnerabilitiesPYSEC-2017-74, PYSEC-2026-1976, PYSEC-2017-74, PYSEC-2026-1976
project/Python-LangGraph/solution/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.4: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
project/JavaScript/solution/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.11: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
project/JavaScript/solution/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.14.2: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
project/JavaScript/solution/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.1: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
project/JavaScript/solution/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.7: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
project/JavaScript/starter-project/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.langchain@1.2.18: 2 known vulnerabilitiesPYSEC-2026-2192, PYSEC-2026-2192
project/Python-LangGraph/solution/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.langchain-openai@1.1.9: 2 known vulnerabilitiesPYSEC-2026-76, PYSEC-2026-76
project/Python-LangGraph/solution/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Codejam Code Based Agents alternatives
View more →Similar ai agents in Learning Resources, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Codejam Code Based Agents (this page) SAP-samples | 69 | Apache-2.0 | Oct 1, 2026 | Scanned, no flagged issues |
| Prompt Engineering Guide dair-ai | 80k | MIT | Mar 11, 2026 | Scanned, no flagged issues |
| Learn Claude Code shareAI-lab | 80k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| AI Engineering From Scratch rohitg00 | 76k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Front End Checklist thedaviddias | 75k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| System Prompts Leaks asgeirtj | 71k | CC0-1.0 | Nov 1, 2026 | Scanned, no flagged issues |