AFFiNE
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
A side-by-side editorial comparison of HedgeDoc and Nuclino — release velocity, themes, recent moves, and the top alternatives to consider.
A collaborative markdown editor on a security-driven maintenance cadence.
HedgeDoc's 1.x line ships every one to two months and is dominated by security response. Recent releases carry seven advisories between them — HTML injection via an email localpart, YAML frontmatter denial of service, CSRF in the Gist export, a rate-limit bypass through CF-Connecting-IP, a permission-value validation gap, missing upload security headers, and script execution in uploaded SVGs. Around those sit configuration knobs for the external-link warning, webp uploads, and rate limits.
Nuclino's October drop turns to mobile and content blocks after three MCP-focused releases.
Nuclino ships a feature roundup roughly every quarter. The October 26 release covers mobile app improvements, more highlight colors and audio blocks; the feed carries only the title, so details aren't visible. The three releases before it, January through September, each extended its MCP server and API access for AI assistants.
HedgeDoc's 1.x line ships every one to two months and is dominated by security response. Recent releases carry seven advisories between them — HTML injection via an email localpart, YAML frontmatter denial of service, CSRF in the Gist export, a rate-limit bypass through CF-Connecting-IP, a permission-value validation gap, missing upload security headers, and script execution in uploaded SVGs. Around those sit configuration knobs for the external-link warning, webp uploads, and rate limits.
Two threads run in parallel. The perimeter work reduces attack surface and maintenance burden at once: old API endpoints and unused config are deleted, Node 18 support is dropped now that its security window has closed, and features added in one release tend to gain an off switch in the next. The second thread is realtime correctness — concurrent-editing data loss, connections dropped mid-handshake, operations discarded during revision gap recovery — which is the only work aimed at the core editing experience rather than its edges.
Expect the 1.x line to continue as security and correctness maintenance, with more legacy endpoints and configuration removed rather than new editing features added.
Nuclino ships a feature roundup roughly every quarter. The October 26 release covers mobile app improvements, more highlight colors and audio blocks; the feed carries only the title, so details aren't visible. The three releases before it, January through September, each extended its MCP server and API access for AI assistants.
After a year where MCP access was the recurring thread, the latest drop goes back to editor and mobile basics. Nuclino looks to alternate between the AI-assistant access layer and core editing features rather than going all-in on either.
The quarterly rhythm points to the next roundup around late January 2027. Whether MCP returns as a headline item there is unclear from these entries.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either HedgeDoc or Nuclino.
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
SiYuan's 3.8.9 betas add only LaTeX paste fixes as the release nears stable.
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
GitHub adds GPT-6.1 Terra to Copilot and makes assisted permissions GA across CLI, app and VS Code.
Readwise splits its bundle into Reader-only and Highlights-only plans and renames its first app.
Joplin Cloud AI runs on Mistral's EU endpoint with zero data retention.
See all HedgeDoc alternatives → · See all Nuclino alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. HedgeDoc and Nuclino are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. HedgeDoc and Nuclino are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top HedgeDoc alternatives in Collab are ranked by recent ship velocity. Browse the "HedgeDoc alternatives" section above for the current picks, or visit /alternatives/hedgedoc for the full list with editorial commentary on each.
Top Nuclino alternatives in Collab are ranked by recent ship velocity. Browse the "Nuclino alternatives" section above for the current picks, or visit /alternatives/nuclino for the full list with editorial commentary on each.