Zipkin
Zipkin's last release was January 2025 — a dependency bump, and then nothing.
A side-by-side editorial comparison of Aim and Glances — release velocity, themes, recent moves, and the top alternatives to consider.
An experiment tracker grinding on storage performance — and quiet for over a year.
Aim is an open-source ML experiment tracker whose 3.2x line reads almost entirely as storage and indexing work: constant indexing of in-progress runs, reading from a single unified database, fallbacks when the index is missing, stalled-run detection. The user-facing additions in this window are narrow — a read-only UI mode, report creation, self-signed SSL support, PytorchLightning logger contexts. The most recent entry here is from May 2025, making this feed over a year stale.
Every Glances release this year has carried CVE fixes — the monitoring tool is being audited in public.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
Aim is an open-source ML experiment tracker whose 3.2x line reads almost entirely as storage and indexing work: constant indexing of in-progress runs, reading from a single unified database, fallbacks when the index is missing, stalled-run detection. The user-facing additions in this window are narrow — a read-only UI mode, report creation, self-signed SSL support, PytorchLightning logger contexts. The most recent entry here is from May 2025, making this feed over a year stale.
The direction across these releases is toward making the local storage layer trustworthy at scale rather than expanding what the tracker does. Repeated fixes around index corruption, empty index.db handling, false-positive metric checks, and session refresh point at users hitting durability problems on long-running or high-volume tracking. Integration surface grows only where contributors push it — S3 client config, Lightning contexts, remote mass updates all arrive as outside contributions rather than a planned roadmap.
With no release visible in over a year, the honest read is that cadence has stopped rather than shifted; the entries give no signal of a 4.x line or a direction change. If work resumes, the pattern suggests more storage-correctness fixes before any new capability.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
This is what it looks like when a tool that grew up as a local terminal dashboard gets taken seriously as a network service. Nearly every advisory in the window comes from the same root assumption — that the REST API, XML-RPC server and autodiscovery browser are on a trusted network — and the fixes are systematically removing that assumption: authentication warnings on startup, host validation, tighter CORS, redaction that covers values as well as keys. The feature work continues in parallel and is almost entirely about reading more kinds of hardware.
The advisories have moved from transport-level exposure toward data-level leaks in specific endpoints, which suggests the remaining audit surface is the export backends and config serialisation rather than the servers themselves. Expect the next release to follow the same shape: hardware plugin additions plus another round of endpoint fixes.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Aim or Glances.
Zipkin's last release was January 2025 — a dependency bump, and then nothing.
One release turns a telemetry store into synthetics, workflows, and AI observability.
Chord rebuilt Copilot, renamed it, and let it start building the audiences it used to describe
Citus is in maintenance mode across four branches, with the feature work invisible from the feed.
A deprecation sweep and hive-partition join rewrites, shipped on two trains at once.
ServerMap rebuilt and application names finally long enough to describe a service.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Glances is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Glances is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top Aim alternatives in Analytics are ranked by recent ship velocity. Browse the "Aim alternatives" section above for the current picks, or visit /alternatives/aim for the full list with editorial commentary on each.
Top Glances alternatives in Analytics are ranked by recent ship velocity. Browse the "Glances alternatives" section above for the current picks, or visit /alternatives/glances for the full list with editorial commentary on each.