ROOT
ROOT is shipping the pieces of its long-promised v7 inside the v6 release line
A side-by-side editorial comparison of ThingsBoard and ApexCharts — release velocity, themes, recent moves, and the top alternatives to consider.
An IoT platform whose release notes have become a CVE ledger
ThingsBoard ships every release twice — once on the 4.3 line and once as a 4.2 backport with an identical security section — and those security sections now dominate the notes, running to twenty or thirty CVEs per release. The recurring classes are telling: SSRF through AI model provider URLs, SSRF and file access escapes from the TBEL script sandbox, DNS rebinding bypasses, and access control on alarm comments. Feature work continues underneath, mostly IoT Hub integration and an Angular 20 UI migration.
Three releases in three weeks moved ApexCharts from free library to gated open-core.
ApexCharts is shipping the v6 line at an unusual clip — ten releases since 20 July, spanning a plugin platform, a hybrid SVG/canvas renderer, and two new chart types. The core is still zero-dependency and SVG-first, and every release states that existing configs render unchanged. What is new is a commercial layer: an offline licence check now sits over seven premium modules and one chart type, while the free catalogue keeps expanding alongside it.
ThingsBoard ships every release twice — once on the 4.3 line and once as a 4.2 backport with an identical security section — and those security sections now dominate the notes, running to twenty or thirty CVEs per release. The recurring classes are telling: SSRF through AI model provider URLs, SSRF and file access escapes from the TBEL script sandbox, DNS rebinding bypasses, and access control on alarm comments. Feature work continues underneath, mostly IoT Hub integration and an Angular 20 UI migration.
The platform is paying down the security cost of being extensible. TBEL scripting and user-configurable AI model endpoints are exactly the features that make ThingsBoard useful for industrial rule engines, and both are repeatedly the source of sandbox and SSRF findings — so the work has shifted to fencing them with allow-lists, opt-in SSRF protection and configurable security headers. Meanwhile the AI surface keeps growing, with structured output support spreading across more model providers.
The dual-branch pattern will hold, with 4.2 continuing to receive the same security sets as 4.3 until it reaches end of life; expect further hardening of the TBEL sandbox rather than new scripting capability.
ApexCharts is shipping the v6 line at an unusual clip — ten releases since 20 July, spanning a plugin platform, a hybrid SVG/canvas renderer, and two new chart types. The core is still zero-dependency and SVG-first, and every release states that existing configs render unchanged. What is new is a commercial layer: an offline licence check now sits over seven premium modules and one chart type, while the free catalogue keeps expanding alongside it.
The commercialisation arc tightens one notch per release. 6.5.0 introduced licensing with a watermark and an explicit promise that no chart type would be gated; 6.6.0 gated one; 6.7.0 changed enforcement from accepting any valid key to requiring an entitled plan. Running underneath is a genuine engineering push — incremental updateSeries, canvas cell rendering, a numeric fast path for line and area — that makes the paid layer easier to justify. The pattern is a generous free core with the new authoring and analysis surface behind a key.
Expect more premium chart types following `unit`, since the gating machinery and trial-mode watermark are now built and proven. The shared key format across the apex* family suggests entitlement checks propagate to the sibling libraries next.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either ThingsBoard or ApexCharts.
ROOT is shipping the pieces of its long-promised v7 inside the v6 release line
A SQL-on-anything engine shipping rarely, but each release widens what it can reach
Superset's tracked feed is a Helm chart tag stream with no notes attached.
Graphite's answer to its own CVE backlog is a pre-release nobody calls official.
Cortex is betting on Parquet block storage and graduating years of experimental features.
NetObserv is layering TLS visibility and health alerting on top of its eBPF flow pipeline.
See all ThingsBoard alternatives → · See all ApexCharts alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. ApexCharts is currently shipping more aggressively (velocity 10.0 vs 0.0), with 3 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. ApexCharts is currently shipping more aggressively (velocity 10.0 vs 0.0), with 3 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top ThingsBoard alternatives in Analytics are ranked by recent ship velocity. Browse the "ThingsBoard alternatives" section above for the current picks, or visit /alternatives/thingsboard for the full list with editorial commentary on each.
Top ApexCharts alternatives in Analytics are ranked by recent ship velocity. Browse the "ApexCharts alternatives" section above for the current picks, or visit /alternatives/apexcharts for the full list with editorial commentary on each.