Registry › Compare › Botpress vs Nocobase

Botpress vs Nocobase

Botpress leads on trust: 86.5/100 (Grade A) against 68.1/100 (Grade B), a 18.4-point gap. Botpress leads on supply-chain integrity and provenance, and rests on broader evidence; Nocobase leads on maintenance.

A Botpress 86.5

The open-source hub to build & deploy GPT/LLM Agents ⚡️

botpress/botpress · #81 overall · #3 Workflow Platforms · coverage A (4/5)

Choose Botpress if supply-chain integrity and provenance matter most.

+10.1Safety / Integrity: OSSF Scorecard 5.9 against 3.8
+7.2Identity / Provenance: package provenance attested, against none
+3.5Adoption: 17.1k weekly downloads against 16
+1.8Transparency: OSSF Scorecard 5.9 against 3.8

B Nocobase 68.1

NocoBase is the open-source platform for building, running, and evolving business systems with AI. Agents write the code and do the work, NocoBase provides the foundation and governance, and people make the decisions.

nocobase/nocobase · #422 overall · #8 Workflow Platforms · coverage B (3/5)

Choose Nocobase if maintenance matters most.

+2.2Maintenance: last push today, against 1d ago

Where they differ

19.8

Safety / IntegrityBotpress +10.1

9.7

18.0

Identity / ProvenanceBotpress +7.2

10.8

13.5

TransparencyBotpress +1.8

11.7

17.8

MaintenanceNocobase +2.2

20.0

15.7

AdoptionBotpress +3.5

12.2

+1.7

Runtime calibrationNocobase +2.0

+3.7

Full evidence table

An independent, evidence-based trust comparison of Botpress and Nocobase, two Workflow Platforms projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	Botpressbotpress/botpress	Nocobasenocobase/nocobase
HVTrust score	86.5	68.1
Evidence grade	A	B
Coverage grade	A	B
Overall rank	#81	#422
Rank in Workflow Platforms	#3	#8
GitHub stars	15.0k	24.9k
Last updated	1d ago	today
Build provenance	Yes	No
OSSF Scorecard	5.9 / 10	3.8 / 10
License	MIT	NOASSERTION
Downloads	17k/wk	16/wk
Trust dimensions (points earned)
Safety / integrity / 25	19.8	9.7
Identity & provenance / 18	18.0	10.8
Transparency / 17	13.5	11.7
Maintenance / 20	17.8	20.0
Adoption / 20	15.7	12.2
Runtime capability surface (full matrix)
MCP server	—	Declared
External providers	—	—
Requires API keys	Yes	No
Plugin surface	plugins	plugins
Provenance drift	Match	Match

Open in the live compare tool → Botpress profile Nocobase profile More Workflow Platforms →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →