{
"canonical_url": "github.com/deepset-ai/haystack",
"capabilities": [],
"category": "RAG/agent framework",
"commercial": false,
"compliance": [
{
"certificate_id": "deepset gmbh",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "deepset GmbH",
"terms": [
"star_level_1",
"caiq"
]
},
"display": "STAR Level 1: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/deepset gmbh",
"framework": "csa_star",
"issued": "2024-06-03",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:49Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_1"
}
],
"deployment": "GitHub; deepset AI Platform",
"description": "Mature production RAG framework with agent/tool components and enterprise backing.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "general",
"rank": 87,
"recomputed": 85.9,
"score": 77.2,
"score_version": "sar-score-2.0",
"seed_rank": 87,
"seed_score": 85.9,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "security",
"rank": 73,
"recomputed": 78.4,
"score": 72.5,
"score_version": "sar-score-2.0",
"seed_rank": 73,
"seed_score": 78.4,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "data",
"rank": 9,
"recomputed": 92.0,
"score": 82.4,
"score_version": "sar-score-2.0",
"seed_rank": 9,
"seed_score": 92.0,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 89,
"recomputed": 73.4,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 89,
"seed_score": 73.4,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 75,
"recomputed": 74.0,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 75,
"seed_score": 74.0,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 82,
"recomputed": 73.4,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 82,
"seed_score": 73.4,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 79,
"recomputed": 73.4,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 79,
"seed_score": 73.4,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 81,
"recomputed": 73.4,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 81,
"seed_score": 73.4,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 84,
"recomputed": 73.4,
"score": 67.1,
"score_version": "sar-score-2.0",
"seed_rank": 84,
"seed_score": 73.4,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "commercial",
"rank": 94,
"recomputed": 79.7,
"score": 77.4,
"score_version": "sar-score-2.0",
"seed_rank": 94,
"seed_score": 79.7,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "operations",
"rank": 84,
"recomputed": 77.5,
"score": 77.0,
"score_version": "sar-score-2.0",
"seed_rank": 84,
"seed_score": 77.5,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": 70,
"recomputed": 91.2,
"score": 82.8,
"score_version": "sar-score-2.0",
"seed_rank": 70,
"seed_score": 91.2,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {
"github": "deepset-ai/haystack"
},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_745255c910219a98",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 4,
"incidents": 0,
"links": [
{
"date": "2005-12-05",
"kind": "cve",
"title": "CVE-2005-4001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-4001"
},
{
"date": "2024-07-31",
"kind": "cve",
"title": "CVE-2024-41950",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41950"
},
{
"date": "2026-09-30",
"kind": "cve",
"title": "CVE-2026-80490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80490"
},
{
"date": "2026-10-05",
"kind": "cve",
"title": "CVE-2026-105315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105315"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:12:45Z",
"license": "Apache-2.0",
"merged_ids": [
"res_bdefb76beabab4e3"
],
"name": "Haystack",
"news": [
{
"cluster_size": 3,
"date": "2026-10-21T19:10:58Z",
"headline": "haystack release v3.4.1",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## 🔒 Security Notes\r\n\r\n- Haystack now requires `certifi>=2026.10.19`. `certifi` is installed transitively through `httpx` and `posthog`; earlier versions trust eMudhra/emSign certificate authorities whose private keys were compromised (GHSA",
"tag": "product_update",
"url": "https://github.com/deepset-ai/haystack/releases/tag/v3.4.1"
},
{
"cluster_size": 2,
"date": "2026-10-15T09:26:37Z",
"headline": "haystack release v3.4.0",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## ⭐️ Highlights\r\n\r\n### 🐍 Python 3.15 Support, Python 3.10 Dropped\r\nHaystack now officially supports Python 3.15. Python 3.10 reaches end of life in October 2026, so the minimum supported version is now 3.11. ⚠️\r\n\r\n### 📦 ToolResultOffloadCo",
"tag": "product_update",
"url": "https://github.com/deepset-ai/haystack/releases/tag/v3.4.0"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:22:55Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:22:54Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"evidence_url": "https://github.com/deepset-ai/haystack",
"note": "named in the resource's own tags",
"probe": {
"checked_at": "2026-10-26T12:22:55Z",
"status": "not_found"
},
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "haystack.deepset.ai",
"resource_type": "framework",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:32:56Z",
"cves": 4,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 24.0,
"docs": 10.0,
"domain_fit": 72.0,
"ecosystem": 13.0,
"governance": 45.0,
"health": 20.0,
"trust": 24.0
},
"signals": {
"github_archived": false,
"github_created_at": "2019-11-14T09:05:28Z",
"github_forks": 3343,
"github_language": "Python",
"github_open_issues": 186,
"github_pushed_at": "2026-10-26T11:37:10Z",
"github_stars": 26846,
"github_topic": "ai-agents",
"homepage": "https://haystack.deepset.ai",
"observed_popularity": "~20k",
"seed_enrich": {
"changed": [
"publisher_domain",
"tags"
],
"repo": "deepset-ai/haystack"
}
},
"slug": "deepset-haystack",
"sources": [
{
"payload_hash": "176974c4048667f68fd4ee0fae501f18d36cf33541e01459cc006df95319e54f",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://github.com/deepset-ai/haystack"
},
{
"payload_hash": "dcf9ecdde80ebf86aa81a99729d666b5b858d4e062bac229e5ac76bf5529d6bf",
"retrieved_at": "2026-10-26T12:12:45Z",
"system": "github",
"url": "https://github.com/deepset-ai/haystack"
}
],
"tags": [
"agent-framework",
"agentic-ai",
"agentic-rag",
"agents",
"ai",
"ai-agents",
"context-engineering",
"framework",
"genai",
"generative-ai",
"information-retrieval",
"large-language-models",
"llm",
"mcp",
"multi-agent",
"orchestration",
"python",
"rag",
"retrieval-augmented-generation",
"semantic-search"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 3,
"protocols": 3,
"security": 1,
"traces": 5,
"vendor_compliance": 1
},
"url": "https://github.com/deepset-ai/haystack",
"vendor": "deepset"
}