EmailOctopus vs Open Web Analytics

OWA published more releases in the last two weeks than in the previous two years. The sequence runs security hardening (1.8.2, 1.8.3), then a modernization release that raises the floor to PHP 8.2 and rebuilds the JavaScript toolchain (1.9.0), an emergency patch for a 403 that blocked every fresh install (1.9.1), a structural release completing the PSR-4 migration and repairing the updater (1.10.0), and a cleanup pass that tightens REST responses (1.10.1).

This is a self-hosted analytics project being brought back from stagnation in a compressed burst, and the order of the work says how bad the starting position was: patch the security holes, then make it run on a supported PHP, then fix the fact that installing and updating were themselves broken, then start on structure. Backwards-compatibility shims for modules, templates and themes indicate the maintainers are trying to modernize without stranding the existing installed base. The REST API is where that promise is thinnest — 1.10.1 narrows responses to documented properties, which is correct but will break clients that were reading internals.

With the runtime, installer and updater repaired and PSR-4 finished, the next work is most likely to continue on the API and the reporting layer, where 1.10.0 already flagged a cluster of e-commerce bugs.