← Back to home
Comparison · Infra & APIs

CBTF vs Apache ShenYu

A side-by-side editorial comparison of CBTF and Apache ShenYu — release velocity, themes, recent moves, and the top alternatives to consider.

CBTF vs Apache ShenYu: at a glance

FeatureCBTFApache ShenYu
SectorInfra & APIsInfra & APIs
Velocity score0.00.0
Sparks · 30d00
Top themestesting, fuzzing, r-package, developer-toolsapi-gateway, ai-proxy, mcp, token-limiting
Last editorial update1h ago10d ago
WebsiteVisit →Visit →

What is CBTF?

A fuzzer for R packages that grew from one argument at a time to parallel runs across whole namespaces.

CBTF throws deliberately problematic inputs at exported functions and reports which ones error, warn, or survive. It now covers 85 input classes, fuzzes multiple named arguments per call, runs in parallel with a per-function timeout, and reports results as a classed object with print, summary, length, and whitelist methods for pruning false positives. Output control has been refined repeatedly — the latest release adds grouping by input or by function and a summary-only mode.

Read the full CBTF trajectory →

What is Apache ShenYu?

An API gateway that has quietly grown an LLM plugin family — and then stopped shipping.

Apache ShenYu's tracked releases run through the 2.7.0.x patch line and stop in November 2025. The consistent thread across those releases is a set of AI plugins accumulating alongside the traditional gateway ones: an AI proxy, an AI token limiter, an AI request transformer, and an MCP server plugin that shows up in the most recent entry through timeout and request-size fixes. The rest of each release is bug fixing and test coverage, with configuration synchronization through Nacos accounting for a recurring share of the defects.

Read the full Apache ShenYu trajectory →

CBTF vs Apache ShenYu: editorial side-by-side

C
CBTF
INFRA · APIS
0.0

A fuzzer for R packages that grew from one argument at a time to parallel runs across whole namespaces.

◆ Current state

CBTF throws deliberately problematic inputs at exported functions and reports which ones error, warn, or survive. It now covers 85 input classes, fuzzes multiple named arguments per call, runs in parallel with a per-function timeout, and reports results as a classed object with print, summary, length, and whitelist methods for pruning false positives. Output control has been refined repeatedly — the latest release adds grouping by input or by function and a summary-only mode.

◆ Where it's heading

The package has moved from a script-shaped tool to a test-suite component. The single-argument, sequential fuzz() of the early releases could not finish a large namespace or survive a function that simply hangs; the mirai rewrite fixed both, and multi-argument support widened what a run can actually reach. Nearly everything since has gone into making results triageable rather than merely produced: whitelisting, result classes, grouping, and terminal output that fits real function signatures. Note that the 0.1.0 through 0.3.0 entries carry backfilled timestamps recorded in reverse order within under a minute, so their published dates do not reflect release order.

◆ Prediction

The steady expansion of the input catalogue from 70 to 85 with a new time class suggests more input classes are the cheapest next win; the reporting surface is now detailed enough that machine-readable output for CI would be the natural follow-on.

A
Apache ShenYu
INFRA · APIS
0.0

An API gateway that has quietly grown an LLM plugin family — and then stopped shipping.

◆ Current state

Apache ShenYu's tracked releases run through the 2.7.0.x patch line and stop in November 2025. The consistent thread across those releases is a set of AI plugins accumulating alongside the traditional gateway ones: an AI proxy, an AI token limiter, an AI request transformer, and an MCP server plugin that shows up in the most recent entry through timeout and request-size fixes. The rest of each release is bug fixing and test coverage, with configuration synchronization through Nacos accounting for a recurring share of the defects.

◆ Where it's heading

ShenYu is positioning as a gateway for model traffic as well as service traffic, and the pattern is telling — the AI plugins appear first as features and then, one release later, as bug reports, which is what real usage looks like. Rate limiting by token rather than by request is the specific piece that matters, since it is the unit LLM providers actually bill on. Against that, the release notes are undifferentiated pull-request lists and nothing has shipped in the tracked feed for over eight months.

◆ Prediction

Expect further hardening of the MCP server plugin, which is the newest and least settled of the AI additions. The gap since 2.7.0.3 should be checked against the project's actual activity before drawing conclusions from it.

Alternatives to CBTF and Apache ShenYu

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either CBTF or Apache ShenYu.

See all CBTF alternatives → · See all Apache ShenYu alternatives →

Recent activity from CBTF and Apache ShenYu

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 1mo agoCBTFTime inputs added; results groupable by input or function
  2. 6mo agoCBTFParallel fuzzing with timeouts, and multi-argument support
  3. 8mo agoApache ShenYuMCP server plugin fixes and Nacos sync cache corrections
  4. 11mo agoApache ShenYuAI request transformer plugin joins the proxy and token limiter
  5. 0y agoCBTFWhitelisting for false positives, plus clearer result semantics
  6. 1y agoCBTFFunction discovery skips unfuzzable functions; failures no longer crash
  7. 1y agoCBTFFirst release; notes carry only a website link
  8. 1y agoCBTFRaw results returned as an object with summary and print methods
  9. 1y agoApache ShenYuJWT SPI extension and Dubbo method configuration land

Frequently asked questions

What is the difference between CBTF and Apache ShenYu?

They serve adjacent needs but don't currently overlap on shipped themes. CBTF and Apache ShenYu are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is CBTF better than Apache ShenYu?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. CBTF and Apache ShenYu are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to CBTF?

Top CBTF alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "CBTF alternatives" section above for the current picks, or visit /alternatives/caught-by-the-fuzz for the full list with editorial commentary on each.

What are the best alternatives to Apache ShenYu?

Top Apache ShenYu alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Apache ShenYu alternatives" section above for the current picks, or visit /alternatives/shenyu for the full list with editorial commentary on each.