CRI-O
CRI-O ships patch releases across three branches with empty change notes
A side-by-side editorial comparison of Dashy and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
Dashy shipped ten releases in five days; one fixes how auth headers trust origins
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
The cadence stays automated and small-grained, with the maintainer's own fixes interleaved with dependency updates.
More single-PR releases will follow; the entries give no sign of a larger feature release.
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Every 1.38 release since June has been mostly authorization and memory-safety work. The 1.38.0 feature set (RBAC, WebRTC, the monitor function split) is being made safe rather than extended.
Further security releases on 1.38 are likely; the entries give no sign of a 1.39 feature release.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Dashy or ZoneMinder.
CRI-O ships patch releases across three branches with empty change notes
Certbot keeps tidying correctness bugs around renewals and hooks
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
Buildkite drops long-lived GitHub credentials from self-hosted agents
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
Mergify's merge queue now hunts the breaking PR by rerunning failed tests first
See all Dashy alternatives → · See all ZoneMinder alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — self-hosted — within Infra & APIs. Dashy and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dashy and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Dashy alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dashy alternatives" section above for the current picks, or visit /alternatives/dashy for the full list with editorial commentary on each.
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.