LifterLMS
A WordPress LMS that just made its whole REST surface discoverable to AI clients.
A side-by-side editorial comparison of ClassroomIO and ILIAS — release velocity, themes, recent moves, and the top alternatives to consider.
Pre-1.0 open-source LMS in a security-hardening sprint after a wave of disclosed CVEs.
ClassroomIO is an early-stage (0.2.x) open-source learning platform. The recent release log is dominated by security work: stored XSS via SVG upload, email-verification bypass vectors, and a full migration of client-side database calls to server-side authenticated endpoints with role-based filtering — three security releases inside a single week in early December 2025. The January 2026 patch is an unrelated content-save data-loss bug.
Three supported majors, one security fix, patched in lockstep every month.
ILIAS maintains versions 9, 10 and 11 simultaneously and patches all three on the same day. The August drop (11.3, 10.10, 9.22) and the July drop (11.2, 10.9, 9.21) are identical in shape: a maintenance release per branch, each described only as containing security fixes with the details held behind the project's security blog. Release notes carry no changelog at all, just a pointer and a warning to download the packaged tarball rather than GitHub's auto-generated source archive, which breaks composer.
ClassroomIO is an early-stage (0.2.x) open-source learning platform. The recent release log is dominated by security work: stored XSS via SVG upload, email-verification bypass vectors, and a full migration of client-side database calls to server-side authenticated endpoints with role-based filtering — three security releases inside a single week in early December 2025. The January 2026 patch is an unrelated content-save data-loss bug.
The product has just walked through a security maturity gate. Moving from client-side DB access to a server-side API with auth middleware is a foundational change, not a cleanup — it implies the previous architecture wasn't safe to grow on. After it, the cadence drops to small bug fixes, which fits a team catching its breath after structural rework. There's no visible product-direction work yet (no new features, no AI, no integrations).
Once the team is confident in the new server-side architecture, expect the next visible work to swing back to features — likely course-builder or learner-flow improvements that the prior architecture made hard. Another security release is possible but less likely given how comprehensive 0.2.8 was.
ILIAS maintains versions 9, 10 and 11 simultaneously and patches all three on the same day. The August drop (11.3, 10.10, 9.22) and the July drop (11.2, 10.9, 9.21) are identical in shape: a maintenance release per branch, each described only as containing security fixes with the details held behind the project's security blog. Release notes carry no changelog at all, just a pointer and a warning to download the packaged tarball rather than GitHub's auto-generated source archive, which breaks composer.
The pattern is a disciplined coordinated-disclosure cadence rather than a development roadmap — roughly monthly, all branches together, no feature content in the feed. Keeping three majors on the same patch schedule tells you the installed base is spread across all of them, which is what you would expect from self-hosted university deployments that upgrade on academic-year boundaries. Nothing observable here indicates what version 12 might contain.
Expect the next coordinated triple in roughly a month, again with the substance published on the security blog rather than in the release notes.
Other EdTech products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either ClassroomIO or ILIAS.
A WordPress LMS that just made its whole REST surface discoverable to AI clients.
Schoox argues the LMS should be judged on workforce performance, in post after post
Post-v13 cleanup: three beta tags in one evening, two of them carrying nothing at all.
One feature, four branch tags — TAO's feed is backport plumbing, not release news.
The rebrand is finishing while a challenge-evaluation subsystem quietly assembles.
Whatfix's blog has narrowed onto workflow drift and governance — a repositioning in progress
See all ClassroomIO alternatives → · See all ILIAS alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — lms — within EdTech. ILIAS is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. ILIAS is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other EdTech products to evaluate alongside.
Top ClassroomIO alternatives in EdTech are ranked by recent ship velocity. Browse the "ClassroomIO alternatives" section above for the current picks, or visit /alternatives/classroomio for the full list with editorial commentary on each.
Top ILIAS alternatives in EdTech are ranked by recent ship velocity. Browse the "ILIAS alternatives" section above for the current picks, or visit /alternatives/ilias for the full list with editorial commentary on each.