ZenTao
ZenTao posts a 22.0 beta with no notes in the feed.
Comparison · PM
Vikunja vs NocoBase
A side-by-side editorial comparison of Vikunja and NocoBase — release velocity, themes, recent moves, and the top alternatives to consider.
Vikunja vs NocoBase: at a glance
What is Vikunja?
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
What is NocoBase?
NocoBase's v3 beta lets apps ship their own CLI, separate from Agents.
NocoBase ships several betas a day across v2.3 and v3. After multi-app projects on November 12, the two November 13 v3 betas let applications distribute their CLI independently of Agents, add a public installer and streamed uploads, show each coding tool's concurrency limit and current runs in the agent runtime list and turn on web search for DeepSeek models. They also speed up IMAP sync and make stalled release downloads time out.
Vikunja vs NocoBase: editorial side-by-side
Vikunja
0.0PM
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
◆ Current state
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
◆ Where it's heading
The arc moves from feature-completion (S3 storage, drag-and-drop project moves, hover previews in late 2025) toward platform credibility — closing security gaps a self-hosted task tool needs to clear before serious team adoption. The rapid version-number jump from v1.0.0-rc4 to v2.2.1 in two months suggests v1.0 shipped and the team tagged a v2 line aimed at addressing accumulated authz debt. Expect the next several releases to keep the security-first posture rather than return to a feature push.
◆ Prediction
The next release will likely continue closing remaining authz edges (more IDOR audits, additional credential-stripping in API responses) and bundle a translations and dependency sweep. A user-facing feature push probably waits until the security work plateaus.
NocoBase
5.0PM
NocoBase's v3 beta lets apps ship their own CLI, separate from Agents.
◆ Current state
NocoBase ships several betas a day across v2.3 and v3. After multi-app projects on November 12, the two November 13 v3 betas let applications distribute their CLI independently of Agents, add a public installer and streamed uploads, show each coding tool's concurrency limit and current runs in the agent runtime list and turn on web search for DeepSeek models. They also speed up IMAP sync and make stalled release downloads time out.
◆ Where it's heading
v3 is assembling a toolchain around apps built by coding agents: app hosts, release management, CLIs and agent runners, each published as its own package. Many daily betas mean the parts are still moving fast.
◆ Prediction
Expect release management and the agent runtime list to keep changing in daily betas before any v3 release candidate appears.
Alternatives to Vikunja and NocoBase
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Vikunja or NocoBase.
Asana
Asana lets Division admins run their own custom roles, on top Enterprise plans only.
Productboard
Productboard's v2 documents API now keeps plain web addresses and emoji as ordinary text.
Hive
Hive turns reporting into a planning tool: shared inputs, grouped values, per-person drill-downs.
Tracecat
Tracecat 1.5 alpha patches add sub-cases and lock down agent sandboxes.
SmartSuite
SmartSuite adds tracked changes to SmartDocs, so policy edits need an approver.
See all Vikunja alternatives → · See all NocoBase alternatives →
Recent activity from Vikunja and NocoBase
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 21h agoNocoBaseNocoBase v3 beta adds a public CLI installer, DeepSeek web search
- 21h agoNocoBase@nocobase/app-server 5.0.0 beta 6
- 1d agoNocoBaseNocoBase v3 beta separates app CLIs from Agents
- 1d agoNocoBase@nocobase/app-template-default 1.0.0 beta 96
- 1d agoNocoBase@nocobase/create-app 0.1.0 beta 38
- 1d agoNocoBase@nocobase/document-extractor 0.1.0 beta 2
- 7mo agoVikunjav2.2.1: SSRF and IDOR patches plus disabled-account enforcement ⚡
- 9mo agoVikunjav1.0.0-rc4: drag-and-drop project moves, file-storage validation
- 11mo agoVikunjav1.0.0-rc3: S3 storage, comment counts, hover task previews
Frequently asked questions
What is the difference between Vikunja and NocoBase?
They serve adjacent needs but don't currently overlap on shipped themes. NocoBase is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Vikunja better than NocoBase?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NocoBase is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to Vikunja?
Top Vikunja alternatives in PM are ranked by recent ship velocity. Browse the "Vikunja alternatives" section above for the current picks, or visit /alternatives/vikunja for the full list with editorial commentary on each.
What are the best alternatives to NocoBase?
Top NocoBase alternatives in PM are ranked by recent ship velocity. Browse the "NocoBase alternatives" section above for the current picks, or visit /alternatives/nocobase for the full list with editorial commentary on each.