EGroupware
EGroupware's feed has become a security treadmill, with the 23.1 branch days from end of life.
A side-by-side editorial comparison of Hive and Vikunja — release velocity, themes, recent moves, and the top alternatives to consider.
Governance and cross-workspace plumbing, not new AI surface
August's batch is administrative: approval rounds and stages can be locked against edits, action cards can hide apps and areas per action, and status libraries filter by project. Managed Jira actions now move through transitions from List View with Jira still the source of truth. My Actions spans workspaces, and notifications carry comments and reactions.
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
August's batch is administrative: approval rounds and stages can be locked against edits, action cards can hide apps and areas per action, and status libraries filter by project. Managed Jira actions now move through transitions from List View with Jira still the source of truth. My Actions spans workspaces, and notifications carry comments and reactions.
Hive is hardening what it already shipped rather than opening new ground. Permissions around approvals, less clutter on action cards, and tighter two-way Jira sync all read as preparation for larger multi-team deployments, where a workflow has to survive many editors. The AI work that dominated July — Buzz sub-tasks, AI Proofing — is absent from this window.
Expect more admin-scoped controls around approvals and templates, plus continued Jira parity work; on the evidence here the next Buzz change is likelier to be scoping and permissions than a new capability.
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
The arc moves from feature-completion (S3 storage, drag-and-drop project moves, hover previews in late 2025) toward platform credibility — closing security gaps a self-hosted task tool needs to clear before serious team adoption. The rapid version-number jump from v1.0.0-rc4 to v2.2.1 in two months suggests v1.0 shipped and the team tagged a v2 line aimed at addressing accumulated authz debt. Expect the next several releases to keep the security-first posture rather than return to a feature push.
The next release will likely continue closing remaining authz edges (more IDOR audits, additional credential-stripping in API responses) and bundle a translations and dependency sweep. A user-facing feature push probably waits until the security work plateaus.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Hive.
EGroupware's feed has become a security treadmill, with the 23.1 branch days from end of life.
Teable is spending this release cycle making computed fields and admin recovery trustworthy
Copilot's model roster churns weekly while GitHub quietly rewires policy and billing plumbing
A nightly canary train where the AI platform work hides between dependency bumps
Self-hosted dashboard that finished its feature arc and stopped shipping in 2023.
A self-hosted RSS reader that now spends most of its release notes on security.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Vikunja.
Resource Guru is opening the schedule up — first to AI tools, now to bookings that fit themselves.
Rize stops being a time tracker you query and becomes one that runs on a schedule without you.
A competitor-comparison content machine — the feed ranks rivals, it never reports a release.
Resource Guru is teaching its scheduler to place work for you, not just record where you put it
RentRedi is building for landlords who outgrew a spreadsheet — portfolios, documents, and now AI intake
Post-V5 releases are spent making the AI agency actually usable rather than adding to it.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Hive is currently shipping more aggressively (velocity 10.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Hive is currently shipping more aggressively (velocity 10.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top Hive alternatives in PM are ranked by recent ship velocity. Browse the "Hive alternatives" section above for the current picks, or visit /alternatives/hive for the full list with editorial commentary on each.
Top Vikunja alternatives in PM are ranked by recent ship velocity. Browse the "Vikunja alternatives" section above for the current picks, or visit /alternatives/vikunja for the full list with editorial commentary on each.