Loading the catalogue…
Loading the catalogue…
“Near-daily releases and full Sovereign control in self-hosted mode, but two patched critical CVEs and no GDPR DPA mean governance gaps require active admin attention.”
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
lowUpstream change on opencode: github_release 'v1.17.9' → 'v1.17.11', github_last_push '2026-06-23T06:20:52Z' → '2026-06-30T05:52:37Z'
other · open
Source ↗lowUpstream change on opencode: github_release 'v1.17.7' → 'v1.17.9', github_last_push '2026-06-16T03:54:26Z' → '2026-06-23T06:20:52Z'
other · open
Source ↗lowUpstream change on opencode: github_release 'v1.16.2' → 'v1.17.7', github_last_push '2026-06-09T06:22:52Z' → '2026-06-16T03:54:26Z'
other · open
Source ↗lowUpstream change on opencode: github_release 'v1.15.13' → 'v1.16.2', github_last_push '2026-06-02T06:03:32Z' → '2026-06-09T06:22:52Z'
other · open
Source ↗lowUpstream change on opencode: github_release None → 'v1.15.13', github_last_push None → '2026-06-02T06:03:32Z', cve_count 0 → 2
other · open
How OpenCode moves data between the client, the inference endpoint and any vendor-owned services.
OpenAI-compatible. Point OpenCode at Stav, set the header, you're done.
# OpenCode on Stav AI # OpenAI-compatible — drop the base URL in, swap your key, ship. OPENAI_API_KEY=$STAV_API_KEY OPENAI_BASE_URL=https://api.stav.ai/v1 # Header — Stav attributes usage to your registered app and respects # per-app routing policy. Send when the app supports custom headers. X-Stav-App-Id: opencode
Setup notes · Read about sovereign routing →
What a model must support to work well with OpenCode. Match these against the Stav model catalogue to pick an endpoint.
Live usage rolls up every five minutes. We surface the 12-week trend once enough requests have flowed through this app.
Live usage rolls up every five minutes. We surface the model mix once enough requests have flowed through this app.