Aim
An experiment tracker grinding on storage performance — and quiet for over a year.
A side-by-side editorial comparison of Citus and Glances — release velocity, themes, recent moves, and the top alternatives to consider.
Citus is in maintenance mode across four branches, with the feature work invisible from the feed.
Citus is the Postgres extension that shards tables across a cluster, and its release feed right now is almost entirely branch upkeep. Four lines are live at once — 12.1, 13.3, 14.0 and 14.1 — and the recent tags are backports and CI fixes moving between them, authored by a small handful of maintainers. The last release with user-facing feature text is Citus 14.0 in February, which added PostgreSQL 18.1 support and pointed at a blog post rather than listing what changed.
Every Glances release this year has carried CVE fixes — the monitoring tool is being audited in public.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
Citus is the Postgres extension that shards tables across a cluster, and its release feed right now is almost entirely branch upkeep. Four lines are live at once — 12.1, 13.3, 14.0 and 14.1 — and the recent tags are backports and CI fixes moving between them, authored by a small handful of maintainers. The last release with user-facing feature text is Citus 14.0 in February, which added PostgreSQL 18.1 support and pointed at a blog post rather than listing what changed.
The shape here is a mature extension keeping several supported branches alive rather than pushing new capability. Correctness is the live concern: the 12.1 patches fix wrong query results, an EXPLAIN segfault, a standby coordinator crash and a deadlock, all backported from work done on newer branches. Note that the release notes are thin by design — 13.3 and 14.1 list only PR titles for backports and test plumbing, so the feed understates whatever is landing on the main line.
More 12.1 patch tags are the safe expectation while that branch stays supported. Whether the 14.x line picks up new distributed-query features is not visible from these entries — the notes only cover backports, so the main-branch work would have to be read elsewhere.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
This is what it looks like when a tool that grew up as a local terminal dashboard gets taken seriously as a network service. Nearly every advisory in the window comes from the same root assumption — that the REST API, XML-RPC server and autodiscovery browser are on a trusted network — and the fixes are systematically removing that assumption: authentication warnings on startup, host validation, tighter CORS, redaction that covers values as well as keys. The feature work continues in parallel and is almost entirely about reading more kinds of hardware.
The advisories have moved from transport-level exposure toward data-level leaks in specific endpoints, which suggests the remaining audit surface is the export backends and config serialisation rather than the servers themselves. Expect the next release to follow the same shape: hardware plugin additions plus another round of endpoint fixes.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Citus or Glances.
An experiment tracker grinding on storage performance — and quiet for over a year.
Zipkin's last release was January 2025 — a dependency bump, and then nothing.
One release turns a telemetry store into synthetics, workflows, and AI observability.
Chord rebuilt Copilot, renamed it, and let it start building the audiences it used to describe
A deprecation sweep and hive-partition join rewrites, shipped on two trains at once.
ServerMap rebuilt and application names finally long enough to describe a service.
See all Citus alternatives → · See all Glances alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Citus and Glances are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Citus and Glances are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top Citus alternatives in Analytics are ranked by recent ship velocity. Browse the "Citus alternatives" section above for the current picks, or visit /alternatives/citus for the full list with editorial commentary on each.
Top Glances alternatives in Analytics are ranked by recent ship velocity. Browse the "Glances alternatives" section above for the current picks, or visit /alternatives/glances for the full list with editorial commentary on each.