Undertow
Undertow 2.4.0 clears three CVEs and finally lands long-open HTTP/2 and timeout requests
Comparison · DevOps
Libreswan vs Z-Wave JS
A side-by-side editorial comparison of Libreswan and Z-Wave JS — release velocity, themes, recent moves, and the top alternatives to consider.
Libreswan vs Z-Wave JS: at a glance
What is Libreswan?
IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
What is Z-Wave JS?
Z-Wave driver where the hard problems are now smart locks and device quirks.
Z-Wave JS is the driver layer underneath most open-source Z-Wave integrations, and its releases follow a tight weekly-to-fortnightly rhythm mixing three things: protocol correctness, device config files, and developer surface. The current focus is clearly credential handling on smart locks — several consecutive releases fix stale cached credentials, bulk user deletion timeouts, and locks misreporting progress during credential learning. Alongside that, inclusion reliability got direct attention, with ongoing interviews now paused during inclusion and security bootstrapping.
Libreswan vs Z-Wave JS: editorial side-by-side
Libreswan
2.5DEVOPS
IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.
◆ Current state
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
◆ Where it's heading
The project is auditing itself more aggressively than its release cadence suggests, and the parsing paths — certificate handling, IKEv1 proposal defaults — are where the findings keep landing. The 5.0 work visible here was a deliberate tightening of IKEv1 cryptosuite defaults, and the current CVE stream is the same instinct applied to inputs an attacker controls.
◆ Prediction
Further findings from the same audit path would surface as additional point releases against certificate and packet parsing; the entries do not indicate whether the audit is complete.
Z-Wave JS
5.0DEVOPS
Z-Wave driver where the hard problems are now smart locks and device quirks.
◆ Current state
Z-Wave JS is the driver layer underneath most open-source Z-Wave integrations, and its releases follow a tight weekly-to-fortnightly rhythm mixing three things: protocol correctness, device config files, and developer surface. The current focus is clearly credential handling on smart locks — several consecutive releases fix stale cached credentials, bulk user deletion timeouts, and locks misreporting progress during credential learning. Alongside that, inclusion reliability got direct attention, with ongoing interviews now paused during inclusion and security bootstrapping.
◆ Where it's heading
The protocol work is moving from getting commands through to getting them right under adversarial timing — S2 delivery verification, split multi-frame reports, and optimistic value updates now distinguishing actuator from non-actuator command classes. The other steady stream is the device database, which absorbs manufacturer inconsistencies so integrations above it do not have to.
◆ Prediction
User Code and User Credential handling should keep generating fixes, since each release surfaces another lock firmware that deviates from the spec in a new way.
Alternatives to Libreswan and Z-Wave JS
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Libreswan or Z-Wave JS.
Betaflight
Betaflight grew a real autopilot: waypoint missions, geofence RTH and MAVLink ground control
OceanBase
OceanBase is rebuilding itself as a RAG backend without giving up the HTAP story
QGroundControl
QGroundControl rebuilt its flight UI around touch screens, then went quiet for ten months
Pelican
Pelican now ships roughly once a year, and 4.12 is theme housekeeping
WildFly
WildFly's quarterly train is really a stability ladder, and OIDC keeps climbing it
See all Libreswan alternatives → · See all Z-Wave JS alternatives →
Recent activity from Libreswan and Z-Wave JS
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 4d agoZ-Wave JSPTI Zniffer trace support and a value-DB race condition fix
- 25d agoZ-Wave JSInterviews pause during inclusion; proprietary Aeotec and Z-Wave.me commands
- 25d agoLibreswan5.3.2 Security Release addresses CVE-2026-14957
- 1mo agoZ-Wave JSMissing type exports and command class metadata corrections
- 1mo agoZ-Wave JSS2 delivery verification via sequence number; User Code cache sync fix
- 1mo agoZ-Wave JSDevice config corrections for Zooz, SimonTech and MCOHome
- 1mo agoLibreswan5.3.1 Security Release addresses 3 CVEs
- 1mo agoZ-Wave JSGranular interview progress reporting via a new event
- 2y agoLibreswanIKEv1 cryptosuite defaults tightened; systemd libxz dependency dropped
- 2y agoLibreswanCompile error fix carried over from 4.13
Frequently asked questions
What is the difference between Libreswan and Z-Wave JS?
They serve adjacent needs but don't currently overlap on shipped themes. Z-Wave JS is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Libreswan better than Z-Wave JS?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Z-Wave JS is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
What are the best alternatives to Libreswan?
Top Libreswan alternatives in DevOps are ranked by recent ship velocity. Browse the "Libreswan alternatives" section above for the current picks, or visit /alternatives/libreswan for the full list with editorial commentary on each.
What are the best alternatives to Z-Wave JS?
Top Z-Wave JS alternatives in DevOps are ranked by recent ship velocity. Browse the "Z-Wave JS alternatives" section above for the current picks, or visit /alternatives/zwave-js for the full list with editorial commentary on each.