Retool
Retool is retiring standalone Assist while folding the same capability into the app builder.
Comparison · Infra & APIs
Quay vs rgm
A side-by-side editorial comparison of Quay and rgm — release velocity, themes, recent moves, and the top alternatives to consider.
Quay vs rgm: at a glance
What is Quay?
Quay ships nothing but CVE remediation, mirrored across two supported branches
Every entry in Quay's recent history is a security maintenance release, and they arrive as coordinated pairs — a 3.10.x and a 3.12.x tag cut hours apart carrying the same fixes cherry-picked to each branch. The content is dependency remediation against tracked advisories plus two SSRF hardening fixes, one in proxy cache upstream registry configuration and one in repository mirroring sources. No feature work appears in the window.
What is rgm?
A microbiome network model that got itself un-archived by deleting the dependency that killed it.
rgm implements the random graphical model for microbiome interactions across related environments, published in JABES in 2026. The package was archived from CRAN in February 2026 because of its dependency on huge; the recovery release drops that dependency entirely, which cost it the graphical-lasso warm start that used to seed the initial graph — the default is now an empty graph, with warm starts left to the user. A post-processing function returning ggplot diagnostics arrived in the same release.
Quay vs rgm: editorial side-by-side
Quay
5.0INFRA · APIS
Quay ships nothing but CVE remediation, mirrored across two supported branches
◆ Current state
Every entry in Quay's recent history is a security maintenance release, and they arrive as coordinated pairs — a 3.10.x and a 3.12.x tag cut hours apart carrying the same fixes cherry-picked to each branch. The content is dependency remediation against tracked advisories plus two SSRF hardening fixes, one in proxy cache upstream registry configuration and one in repository mirroring sources. No feature work appears in the window.
◆ Where it's heading
This is a registry in pure maintenance posture on its long-lived branches, with the release process itself automated down to changelog-bump commits. The recurring SSRF fixes across proxy cache and mirroring suggest a deliberate sweep through the code paths that fetch from upstream registries rather than isolated reports. Feature development, if it is happening, is landing on a branch this feed does not cover.
◆ Prediction
Expect the paired-branch cadence to continue at roughly the rate advisories land against the bundled Python and npm dependencies. The SSRF sweep looks close to complete, having now covered both proxy cache and mirroring.
rgm
0.0INFRA · APIS
A microbiome network model that got itself un-archived by deleting the dependency that killed it.
◆ Current state
rgm implements the random graphical model for microbiome interactions across related environments, published in JABES in 2026. The package was archived from CRAN in February 2026 because of its dependency on huge; the recovery release drops that dependency entirely, which cost it the graphical-lasso warm start that used to seed the initial graph — the default is now an empty graph, with warm starts left to the user. A post-processing function returning ggplot diagnostics arrived in the same release.
◆ Where it's heading
Three tags shipped inside two hours on one day, and the notes are candid about why: 1.1.0 held the actual work but was never released, 1.2.0 restated it under a higher version to signal the size of the change, and 1.2.1 answered CRAN pre-test feedback. Beyond the archival recovery, the visible work is housekeeping that had accumulated — a shadowed rmvnorm() definition, roxygen import tags that were silently emitting nothing, leftover C++ template scaffolding, and build artifacts under version control. The diagnostics function is the only genuinely new user-facing capability in the window.
◆ Prediction
The immediate task was restoring availability, and that is done; the open question the entries raise is whether losing the graphical-lasso warm start affects convergence in practice, which the new diagnostic plots are positioned to answer.
Alternatives to Quay and rgm
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Quay or rgm.
WPML
WPML made machine translation the default, and its point releases keep chasing WordPress and page builders.
forestploter
A forest plot package that keeps handing users control of one more graphical detail.
ggInterval
Interval-valued data plotting, spending 2026 making its function names and examples survive CRAN.
contagionchannels
Three releases in ten days, every one of them a CRAN reviewer's correction rather than a code change.
tidyaudit
Pipeline provenance for tidyverse workflows, recording what changed at each step without keeping the data.
Recent activity from Quay and rgm
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 7d agoQuayv3.12.21 patches six advisories and blocks SSRF in mirroring
- 8d agoQuayv3.10.25 carries the same advisory fixes to the 3.10 branch
- 28d agoQuayv3.12.20 bumps Go and blocks SSRF in proxy cache config
- 1mo agoQuayv3.10.24 backports the Go bump and proxy cache SSRF fix
- 1mo agoQuayv3.10.23 clears PyJWT, urllib3 and shell-quote advisories
- 1mo agoQuayv3.12.19 clears the same four dependency advisories
- 3mo agorgmJournal DOI replaces the preprint; promotional wording removed
- 3mo agorgmBack on CRAN after dropping the dependency that caused archival
- 3mo agorgmUnreleased twin of the CRAN recovery release
- 2y agorgmFirst release: simulation, estimation and post-processing
Frequently asked questions
What is the difference between Quay and rgm?
They serve adjacent needs but don't currently overlap on shipped themes. Quay is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Quay better than rgm?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Quay is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Quay?
Top Quay alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Quay alternatives" section above for the current picks, or visit /alternatives/quay for the full list with editorial commentary on each.
What are the best alternatives to rgm?
Top rgm alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "rgm alternatives" section above for the current picks, or visit /alternatives/rgm for the full list with editorial commentary on each.