Is Haystack Still Maintained? Live GitHub Status
Haystack, by deepset, is a Python framework for building RAG pipelines, search systems and agents.
Short answer: Yes, it is actively maintained. Health score 100/100. Checked 18 Oct 2026.
What the numbers say
Haystack’s main branch received 757 commits in the last 91 days, against 140 in the same 91 days a year earlier (+441%). Activity is at least half of last year’s pace and no maintenance notice was found, so the index labels it active. It has 26,766 stars on GitHub.
Haystack usage: downloads and installs
haystack-aiTrend: the monthly download count is stored once a day, starting 17 Oct 2026. A chart appears here after a week of readings.
Download and pull counts include automated installs from CI pipelines, containers and mirrors, so they show how widely the software is pulled, not how many people use it. Numbers from different registries are not comparable with each other. Sources: PyPI download statistics via ecosyste.ms, read 18 Oct 2026, 14:54 UTC.
Haystack security practices and adoption
Security practices
OpenSSF Scorecard, an automated review of how the repository is run
- Code review10/10
- Branch protection8/10
- Vulnerabilities10/10
- Dangerous workflow10/10
- Pinned dependencies5/10
- Security policy10/10
All 18 checks
- Maintained10/10
- Dependency update tool10/10
- Token permissions10/10
- OpenSSF Best Practices badge5/10
- Binary artifacts10/10
- License10/10
- Static analysis (SAST)8/10
- Fuzzing10/10
- Packaging10/10
- Signed releasesn/a
- CI tests10/10
- Contributors10/10
Full report, run 12 Oct 2026
Scorecard checks security practices such as code review, branch protection and pinned dependencies; it does not find bugs, and a low score does not mean the software is unsafe. Dependents and download counts show reach, not quality. Sources: OpenSSF Scorecard, GitHub, read 18 Oct 2026, 15:31 UTC.
Health score breakdown
| Part | Points | Based on |
|---|---|---|
| Activity | 35.0 / 35 | 757 commits in the last 91 days (full marks at 600) |
| Trend | 20.0 / 20 | 541% of last year’s pace (full marks at 100%) |
| Recency | 15.0 / 15 | last commit 2 days ago |
| Releases | 10.0 / 10 | latest GitHub release 3 days ago |
| Community | 20.0 / 20 | 762 pull requests merged in the last 91 days (full marks at 300) |
Open issues and pull requests: 155. The score summarises maintenance signals only, not quality or security. How the score works
Haystack: common questions
Is Haystack still maintained?
Yes. As of 18 October 2026, Haystack received 757 commits in the last 91 days and its latest commit is from 16 October 2026, and no maintenance notice was found. Its health score is 100 out of 100.
What is the latest Haystack release?
The latest GitHub release of Haystack is v3.4.0, published on 15 October 2026.
How many people contribute to Haystack?
GitHub lists 447 contributors for Haystack. 762 pull requests were merged in the last 91 days.
What licence does Haystack use?
GitHub identifies the Haystack licence as Apache-2.0. Read the licence file before commercial use.
How many times is Haystack downloaded?
The haystack-ai package on PyPI was downloaded 566,454 times in the last month, according to ecosyste.ms (checked 18 October 2026). The count includes automated installs from CI pipelines and mirrors, so it is not a count of users.
Is Haystack secure?
We cannot say whether the code is free of vulnerabilities. What can be measured is how the project is run: the OpenSSF Scorecard gives Haystack 9.4 out of 10 for security practices (run 12 October 2026), covering checks such as code review, branch protection and pinned dependencies. Read the full report and the project’s security policy before relying on it.
How is the health score calculated?
It adds five parts from public GitHub data: commit activity over 91 days (35 points), the trend against the same period last year (20), how recent the last commit is (15), how recent the last release is (10) and merged pull requests (20). Archived projects score 0; a maintenance notice caps the score at 25. It measures maintenance signals only, not code quality or security.
Visitor rating
Have you used Haystack? Rate it:
Ratings come from visitors, not from EvalAITools, and are not part of the health status above. One rating per visitor per tool every 30 days.
Daily snapshots
| Date (UTC) | Stars | Commits, last 91 days | Status |
|---|---|---|---|
| 18 Oct 2026 | 26,760 | 757 | Active |
| 17 Oct 2026 | 26,750 | 757 | Active |
| 16 Oct 2026 | 26,744 | 771 | Active |
One snapshot is stored per day, starting 16 October 2026. No status change has been recorded for Haystack since then.
Other rag frameworks
| Tool | Status | Stars | Commits (91d) | vs last year |
|---|---|---|---|---|
| LangChain | Active | 148k | 553 | −31% |
| RAGFlow | Active | 92.4k | 2,748 | +299% |
| Docling | Active | 69.1k | 465 | +266% |
| Mem0 | Active | 67.4k | 183 | +40% |
| AnythingLLM | Active | 67.3k | 318 | +221% |
| Pathway LLM App | Active | 58.8k | 5 | +67% |
| LlamaIndex | Slowing down | 52.6k | 105 | −71% |
| LightRAG | Active | 40.2k | 1,950 | +84% |
| Quivr | Active | 39.6k | 569 | — |
| Langchain-Chatchat | No recent commits | 38.7k | 0 | −100% |
| DSPy | Active | 38.7k | 188 | +13% |
| GraphRAG | Maintenance mode | 36.4k | 19 | −14% |
| cognee | Active | 32.5k | 2,651 | +107% |
| Graphiti | Active | 32.0k | 138 | 0% |
| Haystack | Active | 26.8k | 757 | +441% |
| Unstructured | Active | 15.6k | 55 | +206% |
| txtai | Active | 13.0k | 276 | +402% |
| Verba | Archived | 7.7k | 0 | — |
Status badge
Show Haystack’s live maintenance status in a README. The badge updates with this page and links back to it.
[](https://evalaitools.com/tools/haystack/)Read next
How this is measured: commits on the repository’s default branch counted through the GitHub API, the last 91 days against the same 91 days a year earlier; archived flag and licence from the repository; README checked daily for maintenance notices. Commit counts measure activity, not quality, and we have not tested this tool ourselves for this page.