Loading the catalogue…
Loading the catalogue…
“The dominant Python RAG framework — fully Sovereign when self-hosted, but LlamaCloud's unconfirmed DPA and a CVSS 9.8 CVE history make dependency hygiene non-negotiable.”
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
None catalogued.
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
lowUpstream change on llamaindex: github_release 'v0.14.22' → 'v0.14.23', github_last_push '2026-06-20T00:09:30Z' → '2026-06-26T14:23:35Z'
other · open
Source ↗lowUpstream change on llamaindex: github_last_push '2026-06-15T22:21:18Z' → '2026-06-20T00:09:30Z'
other · open
Source ↗lowUpstream change on llamaindex: github_last_push '2026-06-04T16:59:44Z' → '2026-06-15T22:21:18Z'
other · open
Source ↗lowUpstream change on llamaindex: github_last_push '2026-05-29T21:52:59Z' → '2026-06-04T16:59:44Z'
other · open
Source ↗lowUpstream change on llamaindex: github_last_push '2026-05-15T19:35:23Z' → '2026-05-29T21:52:59Z'
other · open
Source ↗lowUpstream change on llamaindex: github_release 'v0.14.21' → 'v0.14.22', github_last_push '2026-05-11T20:18:56Z' → '2026-05-15T19:35:23Z'
other · open
Source ↗lowUpstream change on llamaindex: github_last_push '2026-05-04T22:31:14Z' → '2026-05-11T20:18:56Z'
other · open
Source ↗lowUpstream change on llamaindex: github_release None → 'v0.14.21', github_last_push None → '2026-05-04T22:31:14Z', cve_count None → 0
other · open
Source ↗How LlamaIndex moves data between the client, the inference endpoint and any vendor-owned services.
OpenAI-compatible. Point LlamaIndex at Stav, set the header, you're done.
# LlamaIndex on Stav AI # OpenAI-compatible — drop the base URL in, swap your key, ship. OPENAI_API_KEY=$STAV_API_KEY OPENAI_BASE_URL=https://api.stav.ai/v1 # Header — Stav attributes usage to your registered app and respects # per-app routing policy. Send when the app supports custom headers. X-Stav-App-Id: llamaindex
Setup notes · Read about sovereign routing →
What a model must support to work well with LlamaIndex. Match these against the Stav model catalogue to pick an endpoint.
Live usage rolls up every five minutes. We surface the model mix once enough requests have flowed through this app.
Live usage rolls up every five minutes. We surface the 12-week trend once enough requests have flowed through this app.