SiYuan
SiYuan's 3.8 line is eight builds deep and still stabilizing the same four features
A side-by-side editorial comparison of CommaFeed and Ethico — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | CommaFeed | Ethico |
|---|---|---|
| Sector | Collab | Collab |
| Velocity score | 5.0 | 3.8 |
| Sparks · 30d | 0 | 1 |
| Top themes | rss-reader, self-hosting, security-hardening, api-interop | compliance, case-management, risk-assessment, policy-management |
| Last editorial update | 22h ago | 7d ago |
| Website | Visit → | — |
A self-hosted RSS reader that now spends most of its release notes on security.
CommaFeed is a self-hosted Google Reader replacement that has spent the 6.x-to-7.x stretch rebuilding its trust boundaries rather than its feature list. SSRF protection has been tightened in four consecutive releases, feed parsing now strips javascript: URLs before they reach the database, and OPML imports are filtered against import-time abuse. The 7.x line pairs that with client interop: Fever API, ReadKit compatibility, and now the Google Reader API.
The whistleblower hotline vendor is assembling a compliance suite, one module at a time.
Ethico's case management platform has added a module roughly every quarter: a Risk Assessment module, a role-based myCM dashboard, a custom chart builder in ecoReports, redesigned case follow-ups with automation workflows, category and sub-category hierarchy configuration, and a Communications Hub consolidating emails, reporter updates and comments into one place. The newest release introduces Policy+ and a Form Builder. Announcements are published as previews on LaunchNotes ahead of the actual release, so the notes are brief and forward-looking.
CommaFeed is a self-hosted Google Reader replacement that has spent the 6.x-to-7.x stretch rebuilding its trust boundaries rather than its feature list. SSRF protection has been tightened in four consecutive releases, feed parsing now strips javascript: URLs before they reach the database, and OPML imports are filtered against import-time abuse. The 7.x line pairs that with client interop: Fever API, ReadKit compatibility, and now the Google Reader API.
The project is positioning itself as a sync backend other people's apps talk to, not just a web reader. Each release adds another protocol or client fix while hardening the assumption that an instance may be publicly exposed with untrusted users on it. The 7.0.0 swap from JEXL to sandboxed CEL and the 7.3.0 flip of blockLocalAddresses to a secure default both trade self-hoster convenience for a safer out-of-the-box posture.
Expect continued client-protocol coverage and further SSRF narrowing; the recurring pattern in these entries is that every new fetch path gets a follow-up hardening release.
Ethico's case management platform has added a module roughly every quarter: a Risk Assessment module, a role-based myCM dashboard, a custom chart builder in ecoReports, redesigned case follow-ups with automation workflows, category and sub-category hierarchy configuration, and a Communications Hub consolidating emails, reporter updates and comments into one place. The newest release introduces Policy+ and a Form Builder. Announcements are published as previews on LaunchNotes ahead of the actual release, so the notes are brief and forward-looking.
The direction is stated plainly in the latest title — a connected compliance ecosystem rather than a hotline with a case queue. Each module extends further up the compliance lifecycle: risk assessment before an incident, policy distribution and attestation alongside it, case handling after. The consistent secondary theme is configurability, with categories, dashboards, charts and account settings all moving from fixed to customer-defined.
Policy+ and Form Builder suggest the next work is tying attestation and intake data back into case and risk reporting, since that is the connection the ecosystem framing implies. The published entries are truncated previews, so the actual scope of each release is not fully visible here.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either CommaFeed or Ethico.
SiYuan's 3.8 line is eight builds deep and still stabilizing the same four features
EGroupware's feed has become a security treadmill, with the 23.1 branch days from end of life.
Teable is spending this release cycle making computed fields and admin recovery trustworthy
Copilot's model roster churns weekly while GitHub quietly rewires policy and billing plumbing
Governance and cross-workspace plumbing, not new AI surface
A nightly canary train where the AI platform work hides between dependency bumps
See all CommaFeed alternatives → · See all Ethico alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. CommaFeed is currently shipping more aggressively (velocity 5.0 vs 3.8), with 0 editorial sparks in the last 30 days against 1. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. CommaFeed is currently shipping more aggressively (velocity 5.0 vs 3.8), with 0 editorial sparks in the last 30 days against 1. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top CommaFeed alternatives in Collab are ranked by recent ship velocity. Browse the "CommaFeed alternatives" section above for the current picks, or visit /alternatives/commafeed for the full list with editorial commentary on each.
Top Ethico alternatives in Collab are ranked by recent ship velocity. Browse the "Ethico alternatives" section above for the current picks, or visit /alternatives/ethico for the full list with editorial commentary on each.