OpenStatus
openstatus is adding the enterprise surface without giving up the self-host story
A side-by-side editorial comparison of Authelia and Resend — release velocity, themes, recent moves, and the top alternatives to consider.
Authelia's 4.39 line is a long hardening run, not a feature line
Authelia is an open-source authentication and authorization gateway, and the entire recent window is 4.39 point releases. The content is almost exclusively LDAP behaviour, OIDC/OAuth2 error semantics, and access-control evaluation, punctuated by two releases carrying security advisories — one for access-control rules missing a domain match without canonicalization, one for username canonicalization in Basic Auth against LDAP.
The developer email API is rebuilding itself as something agents log into, not just call
Resend shipped at a near-weekly pace through July and almost all of it points one direction. A hosted MCP server with built-in OAuth, a one-click Claude connector, and a Codex plugin bundling the MCP server and every Resend skill all landed within three weeks, sitting on OAuth 2.1 with PKCE that arrived alongside them. The rest is platform hygiene: Message-ID exposed on webhooks and email endpoints, CSV contact import at scale, suppression management, and automatic revocation of API keys leaked to GitHub.
Authelia is an open-source authentication and authorization gateway, and the entire recent window is 4.39 point releases. The content is almost exclusively LDAP behaviour, OIDC/OAuth2 error semantics, and access-control evaluation, punctuated by two releases carrying security advisories — one for access-control rules missing a domain match without canonicalization, one for username canonicalization in Basic Auth against LDAP.
The recurring theme is normalization: several fixes come down to Authelia comparing two strings that mean the same thing and getting a different answer. Domain matching, username canonicalization, issuer suffix checks and AMR consistency are all the same class of bug in different code paths, and they are being closed one at a time rather than by a single refactor. Alongside that, the LDAP client keeps yielding pool deadlocks, referral chasing, and health-check errors under load.
Given how many of these fixes cluster on the same identifier-comparison problem, the likely next step is more 4.39 patches in the same two areas — LDAP connection handling and access-control matching — before any 4.40 feature work becomes visible.
Resend shipped at a near-weekly pace through July and almost all of it points one direction. A hosted MCP server with built-in OAuth, a one-click Claude connector, and a Codex plugin bundling the MCP server and every Resend skill all landed within three weeks, sitting on OAuth 2.1 with PKCE that arrived alongside them. The rest is platform hygiene: Message-ID exposed on webhooks and email endpoints, CSV contact import at scale, suppression management, and automatic revocation of API keys leaked to GitHub.
Resend is moving from a service you hold an API key for to one a third party or an agent authenticates into on a user's behalf. That is why OAuth and the secret scanner arrived in the same window as the agent surfaces — delegated auth is the thing that makes agent access safe, and long-lived static keys are the thing that makes it dangerous. Distribution is following the same logic, with Resend showing up in the Vercel marketplace, the Claude connector directory, and the Codex plugin marketplace rather than waiting to be integrated.
Expect the MCP surface to widen past sending into contacts, domains, and analytics, and more of these one-click listings wherever agent tools keep directories. The terse changelog entries make it unclear how much of the OAuth work is generally available versus early access.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Authelia or Resend.
openstatus is adding the enterprise surface without giving up the self-host story
SuperTokens is building v12 in canary around one hard problem: migrating existing users
Casdoor ships a minor version per commit, and every one of them is login-flow repair
Buildkite is rebuilding its CI surface for agents first and clearing the v3 baseline out of the way.
Semgrep is spending its releases on parser breadth and scan startup, not new product surface.
A marketing blog, not a changelog: Unleash is recasting feature flags as agent governance
See all Authelia alternatives → · See all Resend alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Resend is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Resend is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Authelia alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Authelia alternatives" section above for the current picks, or visit /alternatives/authelia for the full list with editorial commentary on each.
Top Resend alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Resend alternatives" section above for the current picks, or visit /alternatives/resend for the full list with editorial commentary on each.