Code.org
Code.org moves Adaptive progress to the server and brings CSV uploads back to AI Lab.
A side-by-side editorial comparison of LifterLMS and Open edX — release velocity, themes, recent moves, and the top alternatives to consider.
LifterLMS is wiring its whole LMS into WordPress's abilities registry, endpoint by endpoint.
10.1.0 registered the core REST surface — courses, sections, lessons, memberships, access plans, students, enrollments, progress — as WordPress Abilities API abilities. 10.2.0 extends that to the commercial and assessment halves: quizzes, quiz questions, quiz attempts including grading, orders and transactions, certificate templates and awarded certificates, each with webhook topics and ability registration. It also adds a read-only student grades endpoint with per-lesson breakdowns and time-limited signed download URLs for protected media. Before this arc, the releases were almost entirely security hardening — checkout, imports, registration forms, REST authentication.
Open edX maintenance branches carrying security backports, not features
The visible stream is release-branch commits rather than named releases, and the recent ones are all corrective. Two July entries backport the same fix — an authorization gap where CourseTeamManageAPIView required only authentication, letting any enrolled learner call the endpoint. Earlier entries block SSRF in SAML metadata fetching by validating the URL against loopback, link-local, reserved and private ranges, add LTI launch logging, and normalize block structure keys.
10.1.0 registered the core REST surface — courses, sections, lessons, memberships, access plans, students, enrollments, progress — as WordPress Abilities API abilities. 10.2.0 extends that to the commercial and assessment halves: quizzes, quiz questions, quiz attempts including grading, orders and transactions, certificate templates and awarded certificates, each with webhook topics and ability registration. It also adds a read-only student grades endpoint with per-lesson breakdowns and time-limited signed download URLs for protected media. Before this arc, the releases were almost entirely security hardening — checkout, imports, registration forms, REST authentication.
The direction is unambiguous: make every part of the LMS reachable by an agent through a standard registry rather than a bespoke integration. The refinements in 10.2.0 confirm it is being taken seriously as an interface — ability schemas now reject unknown parameters instead of ignoring them, list abilities return empty collections rather than errors, and rendered markup is omitted where a raw field exists to cut payload size. Bundling the blocks, CLI, helper and REST plugins into core in 10.1.0 removed the version-skew problem that would otherwise make this surface unreliable.
The remaining unregistered areas — engagements, notifications, reporting exports — are the likely next abilities. Payload and schema tightening looks set to continue as real agent traffic exposes rough edges.
The visible stream is release-branch commits rather than named releases, and the recent ones are all corrective. Two July entries backport the same fix — an authorization gap where CourseTeamManageAPIView required only authentication, letting any enrolled learner call the endpoint. Earlier entries block SSRF in SAML metadata fetching by validating the URL against loopback, link-local, reserved and private ranges, add LTI launch logging, and normalize block structure keys.
This window shows the maintenance side of a large deployment-driven platform: fixes land on master and are backported across named release branches (teak, ulmo, verawood) so operators on older lines get them. The security items share a shape — endpoints and integrations that trusted their callers more than they should. Nothing here indicates feature direction, because feature work does not surface in this branch stream.
Expect continued backporting across the active named branches, since the same authorization fix already landed on two of them within a minute of each other. What ships in the next named release is not visible from these entries.
Other EdTech products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either LifterLMS or Open edX.
Code.org moves Adaptive progress to the server and brings CSV uploads back to AI Lab.
TAO ships three patches in one day, all aimed at Resource Manager polish.
Blackboard Learn's 4001.4 reaches Test/Stage, keeping its monthly staging cadence.
Blackboard Learn's public changelog shows only test/stage dates, not features.
D2L Brightspace's changelog feed shows only a monthly webinar listing, with no release detail.
Kolibri 0.20 alphas add structured courses with units and pre/post tests.
See all LifterLMS alternatives → · See all Open edX alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — lms — within EdTech. LifterLMS is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. LifterLMS is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other EdTech products to evaluate alongside.
Top LifterLMS alternatives in EdTech are ranked by recent ship velocity. Browse the "LifterLMS alternatives" section above for the current picks, or visit /alternatives/lifterlms for the full list with editorial commentary on each.
Top Open edX alternatives in EdTech are ranked by recent ship velocity. Browse the "Open edX alternatives" section above for the current picks, or visit /alternatives/openedx for the full list with editorial commentary on each.