Undertow
Undertow 2.4.0 clears three CVEs and finally lands long-open HTTP/2 and timeout requests
Comparison · DevOps
Libreswan vs Pelican
A side-by-side editorial comparison of Libreswan and Pelican — release velocity, themes, recent moves, and the top alternatives to consider.
Libreswan vs Pelican: at a glance
What is Libreswan?
IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
What is Pelican?
Pelican now ships roughly once a year, and 4.12 is theme housekeeping
Pelican is a mature Python static site generator in low-cadence maintenance: 4.12.0 in April 2026 followed 4.11.0 by fifteen months, which itself followed 4.10.0 by sixteen. Nearly all recent work lands in the bundled notmyidea and Simple themes, in summary generation, and in the file-watching and logging plumbing. The contributor pattern is telling — a handful of names carry most merged PRs, and the changelogs read as accumulated small fixes rather than planned feature arcs.
Libreswan vs Pelican: editorial side-by-side
Libreswan
2.5DEVOPS
IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.
◆ Current state
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
◆ Where it's heading
The project is auditing itself more aggressively than its release cadence suggests, and the parsing paths — certificate handling, IKEv1 proposal defaults — are where the findings keep landing. The 5.0 work visible here was a deliberate tightening of IKEv1 cryptosuite defaults, and the current CVE stream is the same instinct applied to inputs an attacker controls.
◆ Prediction
Further findings from the same audit path would surface as additional point releases against certificate and packet parsing; the entries do not indicate whether the audit is complete.
Pelican
0.0DEVOPS
Pelican now ships roughly once a year, and 4.12 is theme housekeeping
◆ Current state
Pelican is a mature Python static site generator in low-cadence maintenance: 4.12.0 in April 2026 followed 4.11.0 by fifteen months, which itself followed 4.10.0 by sixteen. Nearly all recent work lands in the bundled notmyidea and Simple themes, in summary generation, and in the file-watching and logging plumbing. The contributor pattern is telling — a handful of names carry most merged PRs, and the changelogs read as accumulated small fixes rather than planned feature arcs.
◆ Where it's heading
The project is stable rather than growing: the last genuinely structural changes were switching the build tool to PDM and moving file watching to watchfiles back in 4.9.0, and nothing since has altered how Pelican works. Recent releases invest in making the bundled themes usable as inheritance bases — more template blocks, CSS_FILE support, dark mode — which pushes customization toward theme authors instead of core. Expect continuity, not reinvention.
◆ Prediction
The entries show no roadmap signal beyond incremental theme and Python-version support, so the next release most likely follows the same pattern: another year-scale gap, more Simple-theme inheritance hooks, and test-matrix updates for a newer Python.
Alternatives to Libreswan and Pelican
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Libreswan or Pelican.
Betaflight
Betaflight grew a real autopilot: waypoint missions, geofence RTH and MAVLink ground control
OceanBase
OceanBase is rebuilding itself as a RAG backend without giving up the HTAP story
QGroundControl
QGroundControl rebuilt its flight UI around touch screens, then went quiet for ten months
WildFly
WildFly's quarterly train is really a stability ladder, and OIDC keeps climbing it
RESTEasy
Jakarta REST implementation in pure maintenance across two parallel branches.
See all Libreswan alternatives → · See all Pelican alternatives →
Recent activity from Libreswan and Pelican
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 25d agoLibreswan5.3.2 Security Release addresses CVE-2026-14957
- 1mo agoLibreswan5.3.1 Security Release addresses 3 CVEs
- 3mo agoPelicanPelican 4.12 adds dark mode to the default theme
- 1y agoPelicanPelican 4.11 makes Typogrify filters selectable
- 1y agoPelicanPelican 4.10.2 ignores hidden files by default
- 1y agoPelicanPelican 4.10.1 fixes live reload and theme symlinks
- 1y agoPelicanPelican 4.10 adds paragraph-count summaries and a Medium importer
- 2y agoLibreswanIKEv1 cryptosuite defaults tightened; systemd libxz dependency dropped
- 2y agoLibreswanCompile error fix carried over from 4.13
- 2y agoPelicanPelican 4.9.1 fixes the tzdata dependency on Windows
Frequently asked questions
What is the difference between Libreswan and Pelican?
They serve adjacent needs but don't currently overlap on shipped themes. Libreswan is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Libreswan better than Pelican?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Libreswan is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
What are the best alternatives to Libreswan?
Top Libreswan alternatives in DevOps are ranked by recent ship velocity. Browse the "Libreswan alternatives" section above for the current picks, or visit /alternatives/libreswan for the full list with editorial commentary on each.
What are the best alternatives to Pelican?
Top Pelican alternatives in DevOps are ranked by recent ship velocity. Browse the "Pelican alternatives" section above for the current picks, or visit /alternatives/pelican for the full list with editorial commentary on each.