Tracecat
Tracecat's 1.3 alphas keep reworking agent plumbing: tunnels, multi-org MCP, pluggable runners.
Comparison · PM
NocoBase vs Wakapi
A side-by-side editorial comparison of NocoBase and Wakapi — release velocity, themes, recent moves, and the top alternatives to consider.
NocoBase vs Wakapi: at a glance
What is NocoBase?
NocoBase's Runner Agent gets conversation management, task links and agent switching mid-thread.
NocoBase ships two beta trains a day, and the latest center on its agent layer and on demo deployments. Beta 10-28.1 lets users manage Runner Agent conversations with task links, queued messages and usage, and swap agents without losing history; it also adds inline form validation and duplicate-submission protection to app templates. Beta 10-28.2 tightens demo mode so shared demo apps block requests with external effects.
What is Wakapi?
A critical auth bypass lands in the middle of Wakapi's slow identity rebuild.
Wakapi's recent releases cluster around identity and deployment rather than time tracking itself: OpenID Connect login, then an OIDC-only mode, multiple API keys per user, and a switch from Alpine to a distroless nonroot container image. The 2.17.x line has carried two security fixes now — a responsibly disclosed issue in 2.17.3, and a critical authentication bypass in 2.17.6 caused by a shared cache key namespace. Release notes are mostly bare issue numbers, so several entries state that something changed without saying what.
NocoBase vs Wakapi: editorial side-by-side
NocoBase
8.8PM
NocoBase's Runner Agent gets conversation management, task links and agent switching mid-thread.
◆ Current state
NocoBase ships two beta trains a day, and the latest center on its agent layer and on demo deployments. Beta 10-28.1 lets users manage Runner Agent conversations with task links, queued messages and usage, and swap agents without losing history; it also adds inline form validation and duplicate-submission protection to app templates. Beta 10-28.2 tightens demo mode so shared demo apps block requests with external effects.
◆ Where it's heading
The platform is being rebuilt as an app-template and agent product on a 3.0 server line: agents can develop app-local plugins, run conversations tied to tasks, and operate inside templated apps with release management. Each beta also publishes a cluster of package tags, so the feed is dense but the substance sits in the dated release notes.
◆ Prediction
Expect the Runner Agent and app-template work to keep landing in daily betas until app-server 3.0 leaves beta; a stable 3.0 announcement is the likely next large step.
Wakapi
2.5PM
A critical auth bypass lands in the middle of Wakapi's slow identity rebuild.
◆ Current state
Wakapi's recent releases cluster around identity and deployment rather than time tracking itself: OpenID Connect login, then an OIDC-only mode, multiple API keys per user, and a switch from Alpine to a distroless nonroot container image. The 2.17.x line has carried two security fixes now — a responsibly disclosed issue in 2.17.3, and a critical authentication bypass in 2.17.6 caused by a shared cache key namespace. Release notes are mostly bare issue numbers, so several entries state that something changed without saying what.
◆ Where it's heading
The direction is a self-hosted tool making itself deployable somewhere other than one developer's server. External identity providers, an option to disable local login entirely, per-key credentials and a container that runs as a nonroot user are the requirements that come from someone else's security review. The 2.17.6 bypass sits awkwardly against that: a cache keyed without proper namespacing is exactly the class of bug that multi-tenant deployment surfaces, which suggests the auth work is now being exercised harder than the code was written for. Releases have also thinned to roughly one a month from a much faster earlier cadence.
◆ Prediction
The identity and packaging thread is the only sustained one in this feed, so further hardening in that area is the most likely continuation; the sparse release notes make anything more specific guesswork.
Alternatives to NocoBase and Wakapi
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NocoBase or Wakapi.
Camunda
Camunda opens the 8.11 cycle with job-worker fixes and variable metadata across gRPC, REST and MCP.
Todoist
Todoist's 2026 bets are on capture: voice via Ramble, photos and files via Task Capture.
Atarim
Atarim's AI experts now propose changes to live pages as drafts, and the app runs on phones.
Fibery
Fibery's MCP server can now upload local files, so AI assistants can attach screenshots and images.
SmartSuite
SmartSuite adds a scheduled JavaScript runtime with secrets and run history.
See all NocoBase alternatives → · See all Wakapi alternatives →
Recent activity from NocoBase and Wakapi
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoNocoBaseBeta 10-28.2: safer demo mode, agent reply fixes
- 1d agoNocoBaseBeta 10-28.1: Runner Agent conversation management
- 1d agoNocoBase@nocobase/app-template-examples@1.0.0-beta.68
- 1d agoNocoBase@nocobase/app-skills@0.1.0-beta.54
- 1d agoNocoBase@nocobase/app-plugin-users@2.0.0-beta.11
- 1d agoNocoBase@nocobase/app-server@3.0.0-beta.4
- 2mo agoWakapiCritical auth bypass from a shared cache key namespace
- 3mo agoWakapiRelease 2.17.5
- 5mo agoWakapiRelease 2.17.4
- 6mo agoWakapiSecurity fix, relay endpoint dropped, summaries may need regenerating
- 7mo agoWakapiDistroless nonroot container image; SQLite permissions need fixing
- 9mo agoWakapiOIDC-only login mode disables local accounts
Frequently asked questions
What is the difference between NocoBase and Wakapi?
They serve adjacent needs but don't currently overlap on shipped themes. NocoBase is currently shipping more aggressively (velocity 8.8 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is NocoBase better than Wakapi?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NocoBase is currently shipping more aggressively (velocity 8.8 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to NocoBase?
Top NocoBase alternatives in PM are ranked by recent ship velocity. Browse the "NocoBase alternatives" section above for the current picks, or visit /alternatives/nocobase for the full list with editorial commentary on each.
What are the best alternatives to Wakapi?
Top Wakapi alternatives in PM are ranked by recent ship velocity. Browse the "Wakapi alternatives" section above for the current picks, or visit /alternatives/wakapi for the full list with editorial commentary on each.