Registry › Compare › Botpress vs Langflow

Botpress vs Langflow

Botpress leads on trust: 86.1/100 (Grade A) against 79.0/100 (Grade B), a 7.1-point gap. Botpress leads on supply-chain integrity and provenance; Langflow leads on maintenance and adoption.

A Botpress 86.1

The open-source hub to build & deploy GPT/LLM Agents ⚡️

botpress/botpress · #84 overall · #3 Workflow Platforms · coverage A (4/5)

Choose Botpress if supply-chain integrity and provenance matter most.

+7.9Safety / Integrity: OSSF Scorecard 5.9 against 5.5
+7.2Identity / Provenance: package provenance attested, against none

B Langflow 79.0

Langflow is a powerful tool for building and deploying AI-powered agents and workflows.

langflow-ai/langflow · #198 overall · #5 Workflow Platforms · coverage A (4/5)

Choose Langflow if maintenance and adoption matter most.

+2.7Maintenance: last push today, against 1d ago
+2.1Adoption: 156.3k GitHub stars against 15k

Where they differ

19.8

Safety / IntegrityBotpress +7.9

11.9

18.0

Identity / ProvenanceBotpress +7.2

10.8

13.5

TransparencyBotpress +0.3

13.2

17.3

MaintenanceLangflow +2.7

20.0

15.6

AdoptionLangflow +2.1

17.7

+1.9

Runtime calibrationLangflow +3.5

+5.4

Full evidence table

An independent, evidence-based trust comparison of Botpress and Langflow, two Workflow Platforms projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	Botpressbotpress/botpress	Langflowlangflow-ai/langflow
HVTrust score	86.1	79.0
Evidence grade	A	B
Coverage grade	A	A
Overall rank	#84	#198
Rank in Workflow Platforms	#3	#5
GitHub stars	15.0k	156.3k
Last updated	1d ago	today
Build provenance	Yes	No
OSSF Scorecard	5.9 / 10	5.5 / 10
License	MIT	MIT
Downloads	16k/wk	8k/wk
Trust dimensions (points earned)
Safety / integrity / 25	19.8	11.9
Identity & provenance / 18	18.0	10.8
Transparency / 17	13.5	13.2
Maintenance / 20	17.3	20.0
Adoption / 20	15.6	17.7
Runtime capability surface (full matrix)
MCP server	—	Implemented
External providers	—	1 — Postgres
Requires API keys	Yes	No
Plugin surface	plugins	plugins
Provenance drift	Match	Match

Open in the live compare tool → Botpress profile Langflow profile More Workflow Platforms →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →