nfs-ganesha
NFS-Ganesha is porting its management plane from DBUS to gRPC, four major versions in a month.
A side-by-side editorial comparison of Casdoor and whirl — release velocity, themes, recent moves, and the top alternatives to consider.
An identity platform tightening server-side enforcement one micro-release at a time.
Casdoor is a self-hosted single sign-on and identity management service covering OAuth, LDAP, MFA and user administration. It releases continuously — four tags landed within eighty minutes on 16 August — with each carrying a single commit, so a version number here marks one change rather than a bundle.
whirl turned script logging into a standardized provenance artifact regulators can read.
A parallel R script runner that produces execution logs, aimed at regulated analysis environments. The 0.3.0 release added write_biocompute(), emitting logs as BioCompute Objects in standardized JSON, and simplified the approved-package check to a plain package@version vector. Since then the work has been about what the log can be trusted to contain: an environment_secrets option to keep secret variables out of it, direct versus indirect package usage distinguished and highlighted against the approved list, and the same approval check extended to Python packages.
Casdoor is a self-hosted single sign-on and identity management service covering OAuth, LDAP, MFA and user administration. It releases continuously — four tags landed within eighty minutes on 16 August — with each carrying a single commit, so a version number here marks one change rather than a bundle.
The recent run is almost entirely about moving enforcement to where it cannot be bypassed. Password update and MFA setup are now enforced server-side, the column whitelist is respected when an admin updates a user, and sessions and tokens are revoked when a user is forbidden. Each of these closes a gap where the client or an administrative path could sidestep a rule the product already claimed to apply. LDAP search by uidNumber and gidNumber and phone number normalisation round out the same period.
Expect the per-commit release cadence to continue, with further authorization-boundary fixes given three of the last five entries address exactly that. Nothing here signals a larger architectural change.
A parallel R script runner that produces execution logs, aimed at regulated analysis environments. The 0.3.0 release added write_biocompute(), emitting logs as BioCompute Objects in standardized JSON, and simplified the approved-package check to a plain package@version vector. Since then the work has been about what the log can be trusted to contain: an environment_secrets option to keep secret variables out of it, direct versus indirect package usage distinguished and highlighted against the approved list, and the same approval check extended to Python packages.
The through-line is the log as evidence rather than as debugging output. Every recent addition either widens what the log proves — which packages were really used, in which language, against which approved list — or narrows what it must not leak. Setting options only through an explicit with_options argument to run() and getting renv library paths right for Quarto both point the same way: reproducible, auditable child sessions with nothing implicit.
Expect the approved-package and provenance machinery to keep expanding across languages and environments, since Python approval checks followed the R ones and both feed the same log.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or whirl.
NFS-Ganesha is porting its management plane from DBUS to gRPC, four major versions in a month.
Alertmanager is rebuilding its internals in the open, and 0.34 makes operators update their dashboards.
Light-based animal geolocation gets a second model that stops assuming the bird sat still.
ESPHome ships on a calendar, and the August beta train is now four builds deep.
rapr generalises its Rangeland Analysis Platform API access one endpoint at a time
A small B-Cubed utility for turning R Markdown into publishable docs
See all Casdoor alternatives → · See all whirl alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Casdoor is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.
Top whirl alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "whirl alternatives" section above for the current picks, or visit /alternatives/whirl for the full list with editorial commentary on each.