Code.org
Code.org ships daily deploys as Sprite Lab migrates to the Lab2 framework
A side-by-side editorial comparison of Chamilo and ClassroomIO — release velocity, themes, recent moves, and the top alternatives to consider.
Chamilo's 3.0 beta quietly turns the LMS into an MCP server agents can author courses through.
Chamilo runs three lines at once. The legacy 1.11 branch takes security and bugfix releases roughly quarterly, 2.0 reached GA in April and has drawn three patch releases since, and a 3.0 line opened on 13 August. The 3.0 beta is where the direction sits: 456 changes spanning 88 plugin fixes, a 44-item security sweep, and a new MCP server with OAuth 2.1 that exposes course authoring and review to outside clients. The feed's own bodies are unreliable here - both 3.0 tags arrived carrying a single line of text, and the 2.0 GA release reached it only as scraped page fragments.
Pre-1.0 open-source LMS in a security-hardening sprint after a wave of disclosed CVEs.
ClassroomIO is an early-stage (0.2.x) open-source learning platform. The recent release log is dominated by security work: stored XSS via SVG upload, email-verification bypass vectors, and a full migration of client-side database calls to server-side authenticated endpoints with role-based filtering — three security releases inside a single week in early December 2025. The January 2026 patch is an unrelated content-save data-loss bug.
Chamilo runs three lines at once. The legacy 1.11 branch takes security and bugfix releases roughly quarterly, 2.0 reached GA in April and has drawn three patch releases since, and a 3.0 line opened on 13 August. The 3.0 beta is where the direction sits: 456 changes spanning 88 plugin fixes, a 44-item security sweep, and a new MCP server with OAuth 2.1 that exposes course authoring and review to outside clients. The feed's own bodies are unreliable here - both 3.0 tags arrived carrying a single line of text, and the 2.0 GA release reached it only as scraped page fragments.
The rewrite has stopped being the story and the agent surface has started. 2.0 spent its cycle absorbing the legacy feature set - LTI, ONLYOFFICE, the plugin catalogue - and reached GA; 3.0's first beta spends most of its weight on that same restoration work but adds something no 2.0 release contains, an MCP server with OAuth 2.1 auto-connect and tools that write rather than only read. Model providers are being wired directly into the AI helper alongside it. Security remains constant across all three branches, with 44 security items in the 3.0 beta alone.
Expect the MCP tool surface to widen in the next 3.0 beta, since the first pass already moved past read-only lookups into course authoring and review. Whether 3.0 becomes the supported line or 2.0 keeps taking patches is the question the tags themselves do not answer.
ClassroomIO is an early-stage (0.2.x) open-source learning platform. The recent release log is dominated by security work: stored XSS via SVG upload, email-verification bypass vectors, and a full migration of client-side database calls to server-side authenticated endpoints with role-based filtering — three security releases inside a single week in early December 2025. The January 2026 patch is an unrelated content-save data-loss bug.
The product has just walked through a security maturity gate. Moving from client-side DB access to a server-side API with auth middleware is a foundational change, not a cleanup — it implies the previous architecture wasn't safe to grow on. After it, the cadence drops to small bug fixes, which fits a team catching its breath after structural rework. There's no visible product-direction work yet (no new features, no AI, no integrations).
Once the team is confident in the new server-side architecture, expect the next visible work to swing back to features — likely course-builder or learner-flow improvements that the prior architecture made hard. Another security release is possible but less likely given how comprehensive 0.2.8 was.
Other EdTech products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Chamilo or ClassroomIO.
Code.org ships daily deploys as Sprite Lab migrates to the Lab2 framework
TAO Testing ships rapid v56.x patches driven by NYSED client work, security remediation, and localization fixes.
Blackboard Learn 4001.0 enters test/stage ahead of September 2026 production rollout.
Scribe's Optimize agent deepens org-context grounding as core capture holds steady
eduMe doubles down on compliance verticals while competitor EdApp quietly exits the market
Docebo doubles down on agentic AI for L&D, positioning itself as a skills operating system.
See all Chamilo alternatives → · See all ClassroomIO alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — lms — within EdTech. Chamilo is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Chamilo is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other EdTech products to evaluate alongside.
Top Chamilo alternatives in EdTech are ranked by recent ship velocity. Browse the "Chamilo alternatives" section above for the current picks, or visit /alternatives/chamilo for the full list with editorial commentary on each.
Top ClassroomIO alternatives in EdTech are ranked by recent ship velocity. Browse the "ClassroomIO alternatives" section above for the current picks, or visit /alternatives/classroomio for the full list with editorial commentary on each.