
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
create-llama
Advanced tools
The easiest way to get started with LlamaIndex is by using create-llama
. This CLI tool enables you to quickly start building a new LlamaIndex application, with everything set up for you.
Just run
npx create-llama@latest
to get started, or watch this video for a demo session:
Once your app is generated, run
npm run dev
to start the development server. You can then visit http://localhost:3000 to see your app.
Here's how it looks like:
https://github.com/user-attachments/assets/d57af1a1-d99b-4e9c-98d9-4cbd1327eff8
Optionally, you can supply your own data; the app will index it and make use of it, e.g. to answer questions. Your generated app will have a folder called data
.
The app will ingest any supported files you put in this directory. Your Next.js apps use LlamaIndex.TS, so they will be able to ingest any PDF, text, CSV, Markdown, Word and HTML files. The Python backend can read even more types, including video and audio files.
Before you can use your data, you need to index it. If you're using the Next.js apps, run:
npm run generate
Then re-start your app. Remember you'll need to re-run generate
if you add new files to your data
folder.
If you're using the Python backend, you can trigger indexing of your data by calling:
uv run generate
The app will default to OpenAI's gpt-4.1
LLM and text-embedding-3-large
embedding model.
If you want to use different models, add the --ask-models
CLI parameter.
You can also replace one of the default models with one of our dozens of other supported LLMs.
To do so, you have to manually change the generated code (edit the settings.ts
file for Typescript projects or the settings.py
file for Python projects)
The simplest thing to do is run create-llama
in interactive mode:
npx create-llama@latest
# or
npm create llama@latest
# or
yarn create llama
# or
pnpm create llama@latest
You will be asked for the name of your project, along with other configuration options, something like this:
>> npm create llama@latest
Need to install the following packages:
create-llama@latest
Ok to proceed? (y) y
✔ What is your project named? … my-app
✔ What use case do you want to build? › Agentic RAG
✔ What language do you want to use? › Python (FastAPI)
✔ Do you want to use LlamaCloud services? … No / Yes
✔ Please provide your LlamaCloud API key (leave blank to skip): …
? How would you like to proceed? › - Use arrow-keys. Return to submit.
Just generate code (~1 sec)
❯ Start in VSCode (~1 sec)
Generate code and install dependencies (~2 min)
You can also pass command line arguments to set up a new project
non-interactively. For a list of the latest options, call create-llama --help
.
The generated code is using the LlamaIndex Server, which serves LlamaIndex Workflows and Agent Workflows via an API server. See the following docs for more information:
Inspired by and adapted from create-next-app
FAQs
Create LlamaIndex-powered apps with one command
The npm package create-llama receives a total of 53 weekly downloads. As such, create-llama popularity was classified as not popular.
We found that create-llama demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.