Registry › Compare › Botpress vs Dify

Botpress vs Dify

Botpress leads on trust: 86.0/100 (Grade A) against 76.9/100 (Grade B), a 9.1-point gap. Botpress leads on supply-chain integrity and provenance; Dify leads on maintenance and adoption.

A Botpress 86.0

The open-source hub to build & deploy GPT/LLM Agents ⚡️

botpress/botpress · #86 overall · #3 Workflow Platforms · coverage A (4/5)

Choose Botpress if supply-chain integrity and provenance matter most.

+8.3Safety / Integrity: OSSF Scorecard 5.9 against 5.2
+7.2Identity / Provenance: package provenance attested, against none
+0.6Transparency: OSSF Scorecard 5.9 against 5.2

B Dify 76.9

Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.

langgenius/dify · #233 overall · #6 Workflow Platforms · coverage A (4/5)

Choose Dify if maintenance and adoption matter most.

+4.5Adoption: 25.6M weekly downloads against 12.5k
+2.7Maintenance: last push today, against 1d ago

Where they differ

19.8

Safety / IntegrityBotpress +8.3

11.5

18.0

Identity / ProvenanceBotpress +7.2

10.8

13.5

TransparencyBotpress +0.6

12.9

17.3

MaintenanceDify +2.7

20.0

15.5

AdoptionDify +4.5

20.0

+1.9

Runtime calibrationBotpress +0.2

+1.7

Full evidence table

An independent, evidence-based trust comparison of Botpress and Dify, two Workflow Platforms projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	Botpressbotpress/botpress	Difylanggenius/dify
HVTrust score	86.0	76.9
Evidence grade	A	B
Coverage grade	A	A
Overall rank	#86	#233
Rank in Workflow Platforms	#3	#6
GitHub stars	15.0k	160.3k
Last updated	1d ago	today
Build provenance	Yes	No
OSSF Scorecard	5.9 / 10	5.2 / 10
License	MIT	NOASSERTION
Downloads	13k/wk	25.6M/wk
Trust dimensions (points earned)
Safety / integrity / 25	19.8	11.5
Identity & provenance / 18	18.0	10.8
Transparency / 17	13.5	12.9
Maintenance / 20	17.3	20.0
Adoption / 20	15.5	20.0
Runtime capability surface (full matrix)
MCP server	—	Declared
External providers	—	—
Requires API keys	Yes	No
Plugin surface	plugins	plugins
Provenance drift	Match	Partial

Open in the live compare tool → Botpress profile Dify profile More Workflow Platforms →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →