Kitsu
Kitsu ships weekly production-management updates, from per-show roles to a new Kanban board.
A side-by-side editorial comparison of Kanboard and Wakapi — release velocity, themes, recent moves, and the top alternatives to consider.
Kanboard shipped three security releases in ten days, plus a PHP 8.5 move.
Kanboard is a self-hosted PHP kanban board whose releases are now almost entirely security work, and October tripled the pace. 1.2.55 blocked spoofed proxy IPs from bypassing CAPTCHA and login lockouts and enforced project authorization across several board actions; 1.2.56 moved the Docker image to PHP 8.5 to pick up two PHP CVE fixes; 1.2.57 disables PHP session upload progress against another CVE and stops API lookups from revealing that inaccessible projects exist. WebP attachments and exact-email user search are the only feature additions.
Wakapi tightens API key scope and fixes double-counted AI agent time.
Wakapi's 2.18 line opened with security and data fixes: API keys now authorize only /api endpoints (a breaking change), permission checks on the filtered stats endpoint were fixed, and AI agent thinking time was being counted twice, which needs summary regeneration to correct. 2.18.1 fixed slow SQLite charts and an unresponsive server during aggregation, and 2.18.2 adds a heartbeats index that can take hours to build on large tables.
Kanboard is a self-hosted PHP kanban board whose releases are now almost entirely security work, and October tripled the pace. 1.2.55 blocked spoofed proxy IPs from bypassing CAPTCHA and login lockouts and enforced project authorization across several board actions; 1.2.56 moved the Docker image to PHP 8.5 to pick up two PHP CVE fixes; 1.2.57 disables PHP session upload progress against another CVE and stops API lookups from revealing that inaccessible projects exist. WebP attachments and exact-email user search are the only feature additions.
The audit that ran from LDAP escaping through API response shape is now reaching information leaks by error message: returning false instead of a 403 so the API doesn't confirm a project exists. The Docker image has become part of the security perimeter, with two of the three releases changing PHP runtime settings. Features remain small and incidental.
Expect further releases tracking upstream PHP and Alpine security fixes, since the Docker image now ships on PHP 8.5 and has needed two runtime changes in ten days.
Wakapi's 2.18 line opened with security and data fixes: API keys now authorize only /api endpoints (a breaking change), permission checks on the filtered stats endpoint were fixed, and AI agent thinking time was being counted twice, which needs summary regeneration to correct. 2.18.1 fixed slow SQLite charts and an unresponsive server during aggregation, and 2.18.2 adds a heartbeats index that can take hours to build on large tables.
Identity and access remain the theme: OIDC login, OIDC-only mode, multiple API keys, the critical auth bypass fix in 2.17.6, and now narrower key scope. Performance work for large heartbeat tables is emerging alongside it. Release notes are still often bare issue numbers.
Expect 2.18.x patches addressing database migrations, given the MariaDB failure noted in 2.18.1; the notes don't show what a 2.19 would contain.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Kanboard or Wakapi.
Kitsu ships weekly production-management updates, from per-show roles to a new Kanban board.
Hive keeps polishing dashboards: donut charts, project-date windows, and desktop split view.
Camunda opens the 8.11 cycle with a cluster API and more process-variable controls.
Bonsai is turning its CRM into the place Zoom notes, bookings and AI drafts all land.
NocoBase's latest beta makes queued agent failures readable instead of vague.
Productboard's v2 API now redirects merged entities instead of returning not-found errors.
See all Kanboard alternatives → · See all Wakapi alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — self-hosted — within PM. Kanboard and Wakapi are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Kanboard and Wakapi are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top Kanboard alternatives in PM are ranked by recent ship velocity. Browse the "Kanboard alternatives" section above for the current picks, or visit /alternatives/kanboard for the full list with editorial commentary on each.
Top Wakapi alternatives in PM are ranked by recent ship velocity. Browse the "Wakapi alternatives" section above for the current picks, or visit /alternatives/wakapi for the full list with editorial commentary on each.