← Back to home
Comparison · Collab

CommaFeed vs Radarr

A side-by-side editorial comparison of CommaFeed and Radarr — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:self-hosted

CommaFeed vs Radarr: at a glance

FeatureCommaFeedRadarr
SectorCollabCollab
Velocity score5.05.0
Sparks · 30d00
Top themesrss-reader, self-hosted, security-hardening, ssrfmedia-automation, download-clients, dual-branch, maintenance
Last editorial update5h ago13d ago
WebsiteVisit →Visit →

What is CommaFeed?

CommaFeed is patching its way through the attack surface a self-hosted reader inherits

CommaFeed's 7.x line has become a sustained security pass. The newest patch closes Host header injection on the password recovery endpoint and adds a commafeed.password-recovery-public-base-url setting so the email base URL is configured rather than taken from the request. Behind it: local address blocking made secure by default alongside Google Reader API support in 7.3.0, javascript: URLs filtered at parse time in 7.2.1, and SSRF limits on the image proxy in 7.2.0.

Read the full CommaFeed trajectory →

What is Radarr?

Radarr is in steady maintenance, with one new download client the only visible addition

Radarr ships small builds on parallel develop and master branches, typically a handful of commits each. The recent stream is almost entirely correctness work — HTTP request disposal, deferred JSON deserialisation, malformed cookie handling, qBittorrent basic auth, an SQLite busy timeout raised to 1000ms — plus translation updates. The single functional addition is an RQBit download client.

Read the full Radarr trajectory →

CommaFeed vs Radarr: editorial side-by-side

C
CommaFeed
COLLAB
5.0

CommaFeed is patching its way through the attack surface a self-hosted reader inherits

◆ Current state

CommaFeed's 7.x line has become a sustained security pass. The newest patch closes Host header injection on the password recovery endpoint and adds a commafeed.password-recovery-public-base-url setting so the email base URL is configured rather than taken from the request. Behind it: local address blocking made secure by default alongside Google Reader API support in 7.3.0, javascript: URLs filtered at parse time in 7.2.1, and SSRF limits on the image proxy in 7.2.0.

◆ Where it's heading

Every release in this stretch closes a path where content or a request from outside the instance was trusted too far - feed URLs reaching internal addresses, proxied images, javascript: links, and now a header shaping an outbound email. That is the checklist of a project being run as a multi-user hosted service rather than a single-user tool, and it follows directly from the 7.0.0 decision to sandbox filter expressions. Feature work continues in parallel but is clearly the smaller half.

◆ Prediction

The remaining untrusted-input surfaces - OPML import and the feed fetcher's redirect handling - are the likely next targets. The pattern of shipping each fix as its own patch release should continue rather than batching them.

R
Radarr
COLLAB
5.0

Radarr is in steady maintenance, with one new download client the only visible addition

◆ Current state

Radarr ships small builds on parallel develop and master branches, typically a handful of commits each. The recent stream is almost entirely correctness work — HTTP request disposal, deferred JSON deserialisation, malformed cookie handling, qBittorrent basic auth, an SQLite busy timeout raised to 1000ms — plus translation updates. The single functional addition is an RQBit download client.

◆ Where it's heading

Version numbers are moving quickly through 6.1 to 6.4, but the changes behind them are patch-sized; the major.minor increments track branch mechanics rather than feature milestones. The work that is happening targets reliability under load and with third-party clients, which is where a long-running background service accumulates problems.

◆ Prediction

Expect the develop-branch build cadence to continue with further download client and indexer compatibility fixes; nothing here signals a larger release in preparation.

Alternatives to CommaFeed and Radarr

Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either CommaFeed or Radarr.

See all CommaFeed alternatives → · See all Radarr alternatives →

Recent activity from CommaFeed and Radarr

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 1d agoCommaFeedHost header injection closed on the password recovery endpoint
  2. 8d agoCommaFeedGoogle Reader API support and secure-by-default local address blocking
  3. 16d agoCommaFeedjavascript: URLs now filtered at parse time, not just in the client
  4. 17d agoRadarrRadarr 6.4.1: RQBit download client support
  5. 23d agoRadarrRadarr 6.4.0 build 10540: HTTP and JSON handling cleanup
  6. 1mo agoRadarrRadarr 6.4.0 develop bump and cookie handling fix
  7. 1mo agoRadarrRadarr 6.3.0 master build: translations and CI fix
  8. 1mo agoRadarrRadarr 6.3.0 develop build: streaming extension probe fix
  9. 1mo agoCommaFeedFeed-declared icons, starred-entry search, and image-proxy SSRF limits
  10. 2mo agoRadarrRadarr 6.2.1: qBittorrent basic auth and SQLite timeout fixes
  11. 4mo agoCommaFeedMobile unread count in the header plus a graceful refresh shutdown
  12. 5mo agoCommaFeedFilter expressions move from JEXL to a sandboxed visual query builder

Frequently asked questions

What is the difference between CommaFeed and Radarr?

Both compete on the same themes — self-hosted — within Collab. CommaFeed and Radarr are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is CommaFeed better than Radarr?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. CommaFeed and Radarr are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.

What are the best alternatives to CommaFeed?

Top CommaFeed alternatives in Collab are ranked by recent ship velocity. Browse the "CommaFeed alternatives" section above for the current picks, or visit /alternatives/commafeed for the full list with editorial commentary on each.

What are the best alternatives to Radarr?

Top Radarr alternatives in Collab are ranked by recent ship velocity. Browse the "Radarr alternatives" section above for the current picks, or visit /alternatives/radarr for the full list with editorial commentary on each.