惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

B
Blog RSS Feed
Spread Privacy
Spread Privacy
T
Threatpost
C
Cisco Blogs
P
Palo Alto Networks Blog
AI
AI
Cyberwarzone
Cyberwarzone
NISL@THU
NISL@THU
P
Privacy & Cybersecurity Law Blog
G
GRAHAM CLULEY
Simon Willison's Weblog
Simon Willison's Weblog
T
Tor Project blog
Latest news
Latest news
AWS News Blog
AWS News Blog
D
Docker
S
SegmentFault 最新的问题
博客园 - 聂微东
WordPress大学
WordPress大学
Vercel News
Vercel News
S
Securelist
爱范儿
爱范儿
J
Java Code Geeks
Know Your Adversary
Know Your Adversary
S
Schneier on Security
Hugging Face - Blog
Hugging Face - Blog
F
Fortinet All Blogs
Last Week in AI
Last Week in AI
D
DataBreaches.Net
宝玉的分享
宝玉的分享
D
Darknet – Hacking Tools, Hacker News & Cyber Security
MongoDB | Blog
MongoDB | Blog
Engineering at Meta
Engineering at Meta
K
Kaspersky official blog
美团技术团队
博客园 - 叶小钗
阮一峰的网络日志
阮一峰的网络日志
量子位
博客园_首页
Attack and Defense Labs
Attack and Defense Labs
S
Secure Thoughts
Google Online Security Blog
Google Online Security Blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
腾讯CDC
T
Threat Research - Cisco Blogs
雷峰网
雷峰网
有赞技术团队
有赞技术团队
www.infosecurity-magazine.com
www.infosecurity-magazine.com
P
Privacy International News Feed
S
Security Affairs

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
OpenClaw vs Hermes Agent: Stars, Downloads & Usage 2026
Rost · 2026-05-25 · via DEV Community

Open-source AI agent frameworks are exploding in popularity on GitHub.
Two projects at the core of the self-hosted AI systems ecosystem — OpenClaw and Hermes Agent — have pulled so far ahead that the rest of the field is fighting for a distant third place.

Here is the full picture as of May 2026.

The Leaderboard

Star counts are live data fetched from the GitHub API on May 21, 2026. Repos are sorted by current stars, descending.

Rank Project GitHub repo Language Stars Releases last 30 days
1 OpenClaw openclaw/openclaw TypeScript 373,616 62
2 Hermes Agent NousResearch/hermes-agent Python 160,175 5
3 Nanobot HKUDS/nanobot Python 42,873 2
4 AstrBot AstrBotDevs/AstrBot Python 32,709 11
5 ZeroClaw zeroclaw-labs/zeroclaw Rust 31,500 ≥1
6 NanoClaw nanocoai/nanoclaw TypeScript 29,143 ≥1
7 PicoClaw sipeed/picoclaw Go 29,121 3
8 AionUi iOfficeAI/AionUi TypeScript 26,025 ≥3
9 NemoClaw NVIDIA/NemoClaw TypeScript 20,571 0
10 OpenFang RightNow-AI/openfang Rust 17,599 ≥5
11 LangBot langbot-app/LangBot Python 16,084 1
12 memU NevaMind-AI/memU Python 13,672 0
13 IronClaw nearai/ironclaw Rust 12,305 4
14 Moltworker cloudflare/moltworker TypeScript 9,899 0
15 MemOS MemTensor/MemOS Python 9,246 ≥2
16 ClawWork HKUDS/ClawWork Python 8,111 0
17 NullClaw nullclaw/nullclaw Zig 7,603 2
18 MimicLaw memovai/mimiclaw C 5,422 0
19 Moltis moltis-org/moltis Rust 2,697 ≥3
20 Clawra SumeLabs/clawra TypeScript 2,298 0

OpenClaw: 373k Stars and Still Growing

OpenClaw is a personal AI assistant framework built in TypeScript. It runs entirely on the user's own device and connects to over 50 messaging platforms — WhatsApp, Telegram, Slack, Discord, and more — through a single unified interface.

The project launched in November 2025 but truly ignited on January 30, 2026, reaching 100,000 stars within 48 hours of its relaunch. By April 2026 it had overtaken React to become the most-starred software repository in GitHub's history. At the time of this writing it sits at 373,616 stars, 72,000+ forks, and 360 contributors.

The release cadence is extraordinary: 62 tagged releases in the last 30 days puts it in a category of its own in terms of iteration speed. The full arc of how OpenClaw grew from a weekend prototype to GitHub's most-starred repository — including the economics behind the viral spike and the April 2026 subscription cutoff that reshaped weekly growth — is detailed in the OpenClaw rise and fall timeline.

Hermes Agent: The Challenger

Nous Research's Hermes Agent markets itself as "the agent that grows with you." It is a self-improving AI agent built in Python with a built-in learning loop — it creates new skills from experience, searches past conversations for relevant context, and can run on a range of infrastructure options from local hardware to cloud.

Created in July 2025 and now at 160,175 stars, Hermes Agent recently surpassed OpenClaw as the world's most-used open-source AI agent by daily token processing on OpenRouter — though OpenClaw still leads in cumulative all-time usage. The gap between the two in raw GitHub stars remains large (over 200k), but Hermes Agent's trajectory is notably steeper.

Mid-field: The 20k–45k Band

The third through eighth positions are all clustered between 26k and 43k stars, making ranking changes here frequent:

  • Nanobot (HKUDS, 42,873 ⭐) — Python, lightweight graph-based task orchestration from the HKU Data Science lab.
  • AstrBot (AstrBotDevs, 32,709 ⭐) — Python, multi-platform chatbot framework with active release history (11 releases in the last 30 days).
  • ZeroClaw (zeroclaw-labs, 31,500 ⭐) — Rust, systems-level agent runtime targeting low-latency deployments.
  • NanoClaw (nanocoai, 29,143 ⭐) — TypeScript, recently migrated from qwibitai/nanoclaw to nanocoai/nanoclaw; the rename caused a brief star-count gap in trackers.
  • PicoClaw (Sipeed, 29,121 ⭐) — Go, embedded-friendly agent framework. Only 22 stars separate it from NanoClaw.
  • AionUi (iOfficeAI, 26,025 ⭐) — TypeScript, focuses on agentic UI generation with a visual workflow editor.

Language Breakdown

Language Repos in top 20 Total stars
Python 8 294,897
TypeScript 7 470,155
Rust 3 51,502
Go 1 29,121
Zig 1 7,603
C 1 5,422

TypeScript leads in total star weight — largely because of OpenClaw itself — while Python holds the most individual projects. Rust is carving out a niche in the performance-sensitive tier (ZeroClaw, OpenFang, IronClaw).

Release Velocity vs Star Count

High star counts do not always mean high release velocity. Several top-starred repos (NemoClaw, memU, ClawWork, Clawra, MimicLaw) show zero releases in the last 30 days — they may be in maintenance mode or experiencing slower development cycles.

AstrBot stands out in the mid-field with 11 releases in 30 days, suggesting active feature development. OpenFang (≥5) and Moltis (≥3) are also moving quickly relative to their star counts, which may signal emerging momentum.

Notable Moves Since Last Snapshot

  • NanoClaw renamed org from qwibitai to nanocoai; updated link in the table above.
  • NemoClaw language corrected to TypeScript (previously listed as JavaScript in older data).
  • AionUi gained ~800 stars, moving from 8th to a stronger 8th position.
  • MemOS crossed 9,000 stars.

OpenRouter Usage Rankings

GitHub stars measure mindshare; OpenRouter token volume measures actual runtime usage. The two charts tell different stories.

The table below shows the global daily ranking on OpenRouter as of May 21, 2026, filtered to apps and agents that have opted into usage attribution. Counts are daily tokens processed through the platform.

Rank App / Agent Category Daily tokens
1 Hermes Agent Personal / CLI Agents 458 B
2 OpenClaw Personal / CLI Agents 173 B
3 Kilo Code CLI / IDE Agents 163 B
4 Descript Video Generation 68.1 B
5 Claude Code CLI Agents 64.1 B
6 pi CLI Agents 58 B
8 Janitor AI Roleplay 28.4 B
9 ISEKAI ZERO Game 26.8 B
10 CSS AI Pro 25.4 B
11 Cline IDE / CLI Agents 23.5 B
12 Roo Code IDE / Cloud Agents 20.1 B
13 Lemonade Programming App 20 B
14 Mira Personal Agents 15.2 B
15 VidMuse Video Generation 13.3 B
16 AA-LCR Benchmark Research 9.42 B
18 SillyTavern Roleplay 7.84 B
19 OpenHands CLI Agents 7.21 B
20 Nous Research API General Chat 6.63 B

Gaps in rank numbers (e.g., no 7 or 17) reflect apps without public attribution at the time of retrieval; OpenRouter lists 60 apps in total.

All-time cumulative tokens

The daily leader and the all-time leader have swapped since earlier in the year. As of today Hermes Agent has also overtaken OpenClaw on the all-time chart — a milestone that crossed some time after the May 10 daily flip.

App / Agent All-time tokens
Hermes Agent 8.14 T
OpenClaw 7.18 T
Kilo Code 5.21 T
Claude Code 2.6 T

What the numbers mean

The gap between Hermes Agent (458 B daily) and OpenClaw (173 B) is now wider than it was on May 10, when the flip first happened at 224 B vs 186 B. Hermes has more than doubled its daily volume in 11 days; OpenClaw's daily volume has declined.

The architecture difference explains a lot of this. OpenClaw is session-native — it resets between runs, which means every session re-pays the full context-stuffing cost. Hermes is a persistent runtime with a three-layer memory system (identity snapshot, SQLite FTS5 session database, self-written procedural skill files). Once a skill is written, repeat tasks cost a fraction of the tokens.

For the coding-agent sub-category specifically, the top five are Hermes Agent, OpenClaw, Kilo Code, Claude Code, and pi. Cline (#11) and Roo Code (#12) round out the open-source coding-agent tier, both crossing 20 B daily tokens.

The driver of Hermes's May acceleration was the v0.13.0 "Tenacity" release (May 7, 2026): 864 commits, 588 merged PRs, 295 contributors. That release shipped a Kanban-style durable multi-agent task board with heartbeat monitoring and hallucination recovery, plus eight P0 security fixes and Google Chat as the 20th messaging integration.

Community Health

GitHub repository metrics reveal a sharp contrast in project maturity and maintenance style between the two leaders.

Metric OpenClaw Hermes Agent
Issue close rate 89.9 % 37.2 %
Contributors 360 400
Forks 72,696 26,000
Releases shipped (total) 82+ 14+
Disclosed CVEs (2026 YTD) 9 in 4 days (March 2026) 0
Worst CVE severity CVSS 9.9
Exposed public instances 135,000+ across 82 countries Not separately tracked
Security response (v0.13.0) 8 P0 fixes, default redaction on

OpenClaw's 89.9 % issue close rate reflects a well-staffed, responsive maintainer team — the highest of any project in this space. Its release cadence (62 in the last 30 days alone) is exceptional, but that velocity has a cost: roughly a quarter of updates reportedly break response delivery on at least one channel, and the March 2026 CVE cluster (nine issues in four days, the worst at CVSS 9.9) forced emergency patching at scale. Shadowserver confirmed over 135,000 exposed Gateway instances across 82 countries in the same window. The OpenClaw team does publish fixes fast; the problem is that a community of this size patches slowly.

Hermes Agent's 37.2 % issue close rate is the expected profile for a three-month-old project with a backlog accumulating faster than it can be triaged. The security record so far is clean — zero disclosed agent-specific CVEs as of May 2026 — though that partly reflects fewer eyes on the codebase. The v0.13.0 "Tenacity" release shipped eight P0 fixes proactively, before any public disclosure, which is a good signal of security culture.

Ecosystem Size

Package downloads

Package Registry Weekly downloads
openclaw (main) npm 5,344,931
@tencent-weixin/openclaw-weixin npm 230,903
@ollama/openclaw-web-search npm 160,221
@paperclipai/adapter-openclaw-gateway npm 159,310
@larksuite/openclaw-lark npm 115,964
hermes-agent (main) PyPI 53,134

The raw numbers are not directly comparable — npm counts installs on every npm install (including CI runs), while PyPI counts pip installs. OpenClaw also has a larger ecosystem of third-party adapter packages that each pull in the core. Even so, the order-of-magnitude difference reflects OpenClaw's deeper penetration of automated pipelines and developer toolchains.

Hermes Agent at 53,000 PyPI downloads per week is not a small number for a three-month-old Python tool. Its install rate has grown roughly linearly with the GitHub star count.

Skills and integrations

Dimension OpenClaw Hermes Agent
Third-party skill marketplace ClawHub — 44,000+ skills None yet (self-generated only)
Messaging integrations (official) 50+ channels 20 channels
Community repositories (GitHub) Large (untracked by maintainers) 80+ quality-filtered
Skill libraries (community) Embedded in ClawHub 17 curated
Multi-agent orchestration frameworks Built-in ACP swarm 9 third-party
External memory providers Via skills 8 native

ClawHub is OpenClaw's most durable moat: 44,000 community-maintained skills covering integrations, automations, and workflows that would take months to replicate. Hermes's answer is to generate skills from its own task completions rather than pull them from a marketplace — a fundamentally different philosophy that pays off on deep, repeated tasks but leaves gaps on long-tail integrations. The eight external memory backends Hermes ships natively — Honcho, OpenViking, Mem0, Hindsight, and four more — are compared in detail in Agent Memory Providers Compared.

One security note on ClawHub: in Q1 2026 Koi Security identified 341 malicious entries in the registry, prompting OpenClaw to add a verification layer to the skill submission pipeline. A detailed guide to vetting skills, understanding which are safe to install, and navigating ClawHub's quality tiers is in OpenClaw Skills Ecosystem and Practical Production Picks.

Community Sentiment

A synthesis of Reddit threads across r/homeautomation, r/selfhosted, and r/MachineLearning (compiled by kilo.ai) breaks down operator preferences as follows:

Stance Share
Stay on OpenClaw 35 %
Switched fully to Hermes 30 %
Run both side by side 20 %
Withholding judgment on Hermes 15 %

The 15 % holding off on Hermes are primarily concerned about what some users characterise as coordinated promotion activity from newly created accounts in Hermes-related threads — a pattern common to fast-growing projects but notable enough that veteran community members flag it.

Top OpenClaw complaints (by upvote volume)

  1. Release breakage — most-upvoted complaint has 305 votes: "Every single update ships more bugs and problems than before." An estimated 25 % of releases break response delivery on at least one channel.
  2. Memory drift — agents forget prior instructions across sessions, requiring users to re-establish context manually.
  3. Self-host friction — disproportionate time spent on Docker configuration, SSH setup, and YAML tuning relative to actual agent work.

Top Hermes Agent complaints (by frequency)

  1. Unreliable self-evaluation — the agent occasionally reports task success when the outcome was a partial failure.
  2. Skill file overwriting — auto-improvement rewrites manually tuned skill files, discarding intentional customisation.
  3. Integration gaps — ClawHub has a skill for almost everything; Hermes does not, and self-generation takes time to catch up.

The "run both" pattern (20 % of operators) is the most architecturally interesting: OpenClaw as the channel-and-routing layer up front, with Hermes as the deep-specialist backend. Messages arrive via Telegram or Slack, OpenClaw routes them, and the tasks where compounding matters are dispatched to a Hermes instance that has been improving on exactly those workflows for weeks.

Search Interest Trend

Tracking the project growth leaderboard (weekly new GitHub stars, a cleaner signal than raw star count) shows a clear momentum reversal as of May 2026.

Project Weekly star growth Leaderboard position
Claw-code +7,000 #1
Hermes Agent +3,800 #3
OpenClaw +1,700 #11

OpenClaw had a +40,000/week peak in early February 2026 during the post-relaunch explosion. At +1,700/week in May, it is still growing in absolute terms — 373k stars does not happen without weekly adds — but it has settled into a mature project cadence, not a growth sprint.

Hermes Agent at +3,800/week is the fastest-growing agent runtime on the leaderboard right now, despite having less than half of OpenClaw's cumulative stars. Its growth curve is steeper than OpenClaw's was at the same age (week 12 post-launch).

The broader search interest trend corroborates the star-growth pattern. Queries for "Hermes Agent" and "hermes-agent install" have been rising consistently since the February launch; "OpenClaw" search volume peaked in late January and has been flat-to-declining since. The intersection point — where Hermes search volume equals OpenClaw's — has not yet been reached, but the trajectories suggest it will cross sometime in Q3 2026 if current rates hold.

The HN community has also shifted: threads about OpenClaw now centre on security hardening, transport trust (Telegram's lack of default end-to-end encryption), and maintenance overhead. Threads about Hermes Agent are still mostly "how do I set this up for X" — an earlier-stage energy that reflects a project still in its adoption phase.

Useful links