Inspektor Gadget
Inspektor Gadget keeps cutting the privileges an eBPF tool has to ask for.
A side-by-side editorial comparison of runc and Verdaccio — release velocity, themes, recent moves, and the top alternatives to consider.
runc 1.6.0-rc.1 lifts the 1024-CPU limit and refuses settings it used to quietly ignore
The 1.6.0 cycle opened on October 6 with a first release candidate that is mostly cleanup: deprecated libcontainer APIs removed, Go 1.26 now required, urfave/cli moved from v1 to v3, and the binary about 15% smaller on amd64. The changes with operational weight are that cpuAffinity and NUMA memoryPolicy no longer stop at 1024 CPUs or nodes, and that a container asking for a read-only rootfs without its own mount namespace is now refused. Eleven days earlier 1.5.2 worked around a kernel bug, present since v6.17, that corrupted memory inside runc and caused random crashes on cgroup v2. It also stopped runc exec --cgroup from escaping into a sibling cgroup.
Verdaccio's v9 pre-release counter reaches 41, and the notes still say nothing
Verdaccio's feed continues to show lockstep monorepo version bumps under the next-9 tag, now at 9.0.0-next-9.41 for the main package. Every entry from this batch points to one pull request, a version update, with no feature or fix notes attached. A general release looked close in September and has not appeared in this feed.
The 1.6.0 cycle opened on October 6 with a first release candidate that is mostly cleanup: deprecated libcontainer APIs removed, Go 1.26 now required, urfave/cli moved from v1 to v3, and the binary about 15% smaller on amd64. The changes with operational weight are that cpuAffinity and NUMA memoryPolicy no longer stop at 1024 CPUs or nodes, and that a container asking for a read-only rootfs without its own mount namespace is now refused. Eleven days earlier 1.5.2 worked around a kernel bug, present since v6.17, that corrupted memory inside runc and caused random crashes on cgroup v2. It also stopped runc exec --cgroup from escaping into a sibling cgroup.
The project keeps converting silent behaviour into explicit behaviour. Read-only requests that were ignored now fail, a umask that was dropped is now honoured, and poststart hooks moved to conform to the runtime spec. The same maintainers are shrinking the surface underneath, dropping the deprecated API and the high-level cilium/ebpf path, which took roughly 7.5% off the 1.5.2 binary. Stricter behaviour plus a smaller dependency set is what a component under every container host would be expected to do between majors.
1.5.0's notes pointed to a 1.6.0 in late October 2026, and the feed so far shows only rc.1, so further release candidates or the final are the next entries to expect. The refused read-only configurations are the change most likely to surface as user reports during testing.
Verdaccio's feed continues to show lockstep monorepo version bumps under the next-9 tag, now at 9.0.0-next-9.41 for the main package. Every entry from this batch points to one pull request, a version update, with no feature or fix notes attached. A general release looked close in September and has not appeared in this feed.
The release pipeline is clearly active, moving from next-9.31 to next-9.41 in about seven weeks, but these entries reveal only the packaging. The real content of v9 sits outside what the feed records. Ten further pre-releases without a stable tag suggest the cycle has more distance to run than the coordinated versioning first implied.
The entries do not support a date for v9.0.0. More next-9 bumps are the only safe expectation until a stable tag appears.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either runc or Verdaccio.
Inspektor Gadget keeps cutting the privileges an eBPF tool has to ask for.
k0s opens its 1.37 line while security fixes ride the older branches.
Grype widens distro accuracy while each release clears its own dependency advisories.
Borg 2.0 beta 25 breaks repositories to swap its hash and repository format.
CrowdSec's 1.8.2 candidates let operators write their own bot fingerprints.
AdGuard Home renames its next release: the 0.108 beta line becomes v1.0.0.
See all runc alternatives → · See all Verdaccio alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Verdaccio is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Verdaccio is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top runc alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "runc alternatives" section above for the current picks, or visit /alternatives/runc for the full list with editorial commentary on each.
Top Verdaccio alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Verdaccio alternatives" section above for the current picks, or visit /alternatives/verdaccio for the full list with editorial commentary on each.