Basedash
Basedash keeps pushing its data out of the workspace — now to people without accounts
A side-by-side editorial comparison of distributions3 and Glances — release velocity, themes, recent moves, and the top alternatives to consider.
distributions3 0.3.0 adds sample-based distributions and likelihood derivatives
An R package giving probability distributions a consistent object interface - d/p/q/r functions, moments, and prodist() methods that pull a fitted distribution out of a regression object. Version 0.3.0 is the first substantive release under Achim Zeileis's maintenance, and it widens what a distribution is allowed to be: Empirical() represents a distribution by a random sample rather than by parameters, and numerical fallbacks now fill in cdf(), pdf(), quantile(), random() and the moments for any object that implements only some of them. New score() and hessian() generics compute first and second derivatives of the log-likelihood with respect to the parameters, analytically for a few distributions and numerically for the rest.
Every Glances release this year has carried CVE fixes — the monitoring tool is being audited in public.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
An R package giving probability distributions a consistent object interface - d/p/q/r functions, moments, and prodist() methods that pull a fitted distribution out of a regression object. Version 0.3.0 is the first substantive release under Achim Zeileis's maintenance, and it widens what a distribution is allowed to be: Empirical() represents a distribution by a random sample rather than by parameters, and numerical fallbacks now fill in cdf(), pdf(), quantile(), random() and the moments for any object that implements only some of them. New score() and hessian() generics compute first and second derivatives of the log-likelihood with respect to the parameters, analytically for a few distributions and numerically for the rest.
Growth used to arrive as new distribution families contributed from outside - the extreme-value set, Erlang, later the Poisson binomial. This release changes the axis: alongside two new distributions it adds an inference layer (score, hessian) and a forecast-evaluation one (crps() methods against scoringRules), which are capabilities about distributions rather than more of them. Dependency weight is being cut at the same time, with ggplot2 demoted to Suggests and glue replaced by base R sprintf().
With numeric fallbacks and the derivative generics in place, expect analytic score() and hessian() methods to be filled in across more of the distribution catalogue. The constructor-default change is the likeliest source of follow-up fixes, since calls like Poisson() now return a length-zero distribution where they previously errored.
Six releases since March, and all but one ship security patches. 4.5.2 alone corrected eight CVEs: CORS defaults allowing cross-origin credential theft, incomplete secrets redaction leaking password hashes and SNMP credentials through /api/v4/args, missing host validation leaving the REST API open to DNS rebinding, SQL injection in the DuckDB export, command injection through process names in action templates, and credential leakage via Zeroconf-spoofed browser autodiscovery. The pattern continues through 4.5.3, 4.5.4, 4.5.5 and 4.5.6, the last fixing a value-level bypass that leaked credentials embedded in URL config values. Alongside it, hardware coverage keeps widening — Intel and AMD GPUs, NVIDIA Jetson, Rockchip NPU and MPP, Raspberry Pi VideoCore.
This is what it looks like when a tool that grew up as a local terminal dashboard gets taken seriously as a network service. Nearly every advisory in the window comes from the same root assumption — that the REST API, XML-RPC server and autodiscovery browser are on a trusted network — and the fixes are systematically removing that assumption: authentication warnings on startup, host validation, tighter CORS, redaction that covers values as well as keys. The feature work continues in parallel and is almost entirely about reading more kinds of hardware.
The advisories have moved from transport-level exposure toward data-level leaks in specific endpoints, which suggests the remaining audit surface is the export backends and config serialisation rather than the servers themselves. Expect the next release to follow the same shape: hardware plugin additions plus another round of endpoint fixes.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either distributions3 or Glances.
Basedash keeps pushing its data out of the workspace — now to people without accounts
RStudio ships through release branches, and the notes are commit messages
dbt Fusion's second beta is adapter work: ClickHouse gets materializations, indexes, and catalogs
Fulcrum is betting its whole map stack on Esri, with a hard Google Maps cutoff on September 1.
Holistics keeps fencing in the AI layer it spent the summer building.
Dovetail spent July opening doors to other tools and August making its own rooms easier to enter.
See all distributions3 alternatives → · See all Glances alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. distributions3 is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. distributions3 is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top distributions3 alternatives in Analytics are ranked by recent ship velocity. Browse the "distributions3 alternatives" section above for the current picks, or visit /alternatives/distributions3-r for the full list with editorial commentary on each.
Top Glances alternatives in Analytics are ranked by recent ship velocity. Browse the "Glances alternatives" section above for the current picks, or visit /alternatives/glances for the full list with editorial commentary on each.