nuggets
nuggets keeps compounding on the 2.0 rewrite — more pattern families, lighter install.
A side-by-side editorial comparison of Casdoor and Cosmic — release velocity, themes, recent moves, and the top alternatives to consider.
Casdoor is spending its release cadence moving auth checks from the client to the server
Casdoor is in a tight patch cadence: six tagged releases inside a week, most carrying a single commit. The substance is concentrated in identity enforcement rather than features - password rotation and MFA setup are now enforced server-side, admin updates to a user respect the column whitelist, sessions and tokens are revoked when a user is forbidden, and phone numbers are normalised before they are stored. The remainder is release plumbing and a PostgreSQL query fix.
Cosmic retired AI Studio and gave its agents goals — the CMS is becoming an agent runtime.
Six weeks of releases pull in one direction. AI Studio was retired and Cosmic's AI consolidated into three surfaces: Agents, Workflows, and Code. Agents gained goals described in plain language that they work toward on their own, running steps and checking in, plus write access to reusable rich-text Content Blocks rather than read-only reference. Semantic search embeds bucket objects into a vector index so content is retrievable by meaning. The two newest entries add Claude Opus 5 and Kimi K3 to the model lineup.
Casdoor is in a tight patch cadence: six tagged releases inside a week, most carrying a single commit. The substance is concentrated in identity enforcement rather than features - password rotation and MFA setup are now enforced server-side, admin updates to a user respect the column whitelist, sessions and tokens are revoked when a user is forbidden, and phone numbers are normalised before they are stored. The remainder is release plumbing and a PostgreSQL query fix.
Read together, these commits describe one job: closing the gap between what the console enforces and what the backend enforces. Several of them move a check that previously lived in the UI into the server, which is the work of a project being deployed into environments that audit it. New authentication providers and integrations have thinned relative to this hardening pass.
The next releases most likely continue the same sweep - remaining endpoints where an admin or user request is trusted more than the server verifies - rather than adding a new identity provider.
Six weeks of releases pull in one direction. AI Studio was retired and Cosmic's AI consolidated into three surfaces: Agents, Workflows, and Code. Agents gained goals described in plain language that they work toward on their own, running steps and checking in, plus write access to reusable rich-text Content Blocks rather than read-only reference. Semantic search embeds bucket objects into a vector index so content is retrievable by meaning. The two newest entries add Claude Opus 5 and Kimi K3 to the model lineup.
The content API is turning into a runtime agents operate inside: goals instead of prompts, write permissions instead of suggestions, and a vector index so an agent can find what it needs without being handed it. Retiring AI Studio is the clearest signal — Cosmic is choosing fewer, deeper surfaces over a menu of separate AI features, which is a harder position to reverse.
Expect agent write scope to extend past Content Blocks to objects and media, and goals to gain triggers or schedules so they run without a person starting them.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or Cosmic.
nuggets keeps compounding on the 2.0 rewrite — more pattern families, lighter install.
projoint spent a year on CRAN paperwork, then shipped a correctness fix it flagged itself.
eratosthenes spends 0.1.0 hardening inputs rather than adding chronology methods.
dqcheckr adds drift analysis, then removes the YAML a user had to hand-write.
An actuarial mainstay spends its releases on CI plumbing, not on new mathematics.
EDAForge is a data-quality auditor renamed mid-flight, still finding its CRAN footing.
See all Casdoor alternatives → · See all Cosmic alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Casdoor and Cosmic are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor and Cosmic are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.
Top Cosmic alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Cosmic alternatives" section above for the current picks, or visit /alternatives/cosmicjs for the full list with editorial commentary on each.