Simple Analytics
Privacy analytics tightening its API and moving IP blocking off the CDN
A side-by-side editorial comparison of Umami and VictoriaMetrics — release velocity, themes, recent moves, and the top alternatives to consider.
Umami spent late 2025 patching Next.js CVEs, then shipped Boards and Session Replay in v3.1.0.
The window splits sharply. Four of six releases are December 2025 patches across the v2 and v3 lines, all responding to the same Next.js and React security advisories plus Docker build breakage — several shipped within days of each other because the first fix updated Next.js without the affected React versions. Then v3.1.0 in April 2026 delivered custom dashboards as Boards, Session Replay, Web Vitals performance tracking, a redesigned share page, and a large batch of fixes.
Five of six VictoriaMetrics entries are scraped GitHub page furniture; one is a real LTS patch.
The feed is largely broken. Entries titled Appearance settings, Code security, Secret protection, SUPPORT & SERVICES and Enterprise platform are fragments of GitHub.com navigation chrome, most with no source URL and one pointing at docs.github.com. The single genuine release is v1.136.6 on the v1.136.x LTS line, carrying an Alpine base-image upgrade from 3.23.3 to 3.23.4 and bugfixes shared with the community build.
The window splits sharply. Four of six releases are December 2025 patches across the v2 and v3 lines, all responding to the same Next.js and React security advisories plus Docker build breakage — several shipped within days of each other because the first fix updated Next.js without the affected React versions. Then v3.1.0 in April 2026 delivered custom dashboards as Boards, Session Replay, Web Vitals performance tracking, a redesigned share page, and a large batch of fixes.
The security cluster is a framework dependency showing its cost — an analytics tool inheriting its release schedule from Next.js advisories. v3.1.0 is where product work resumes, and its content is telling: Session Replay and Web Vitals move Umami past pageview counting into behaviour and performance, which is the territory occupied by heavier commercial analytics rather than the lightweight privacy-first tools it grew up alongside.
Expect the next releases to build on Boards and Session Replay rather than return to the counting core, since both are new surfaces that arrived with a single release and no follow-up yet.
The feed is largely broken. Entries titled Appearance settings, Code security, Secret protection, SUPPORT & SERVICES and Enterprise platform are fragments of GitHub.com navigation chrome, most with no source URL and one pointing at docs.github.com. The single genuine release is v1.136.6 on the v1.136.x LTS line, carrying an Alpine base-image upgrade from 3.23.3 to 3.23.4 and bugfixes shared with the community build.
What can be read from one real entry is maintenance discipline: a 12-month-supported LTS branch getting security and defect backports that also land in the community release. Product direction cannot be read from this feed at all until the crawl source is corrected.
Expect continued v1.136.x patch releases on the LTS support cadence. Any claim about feature direction would not be grounded in these entries.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Umami.
Privacy analytics tightening its API and moving IP blocking off the CDN
A BI tool extending analytics-as-code to charts while smoothing the point-and-click path
Dashboard analytics in slow maintenance, with admin controls the only moving part
An AI BI tool turning itself into an API other products can build analytics on
ADManager Plus opened to third-party identity apps in January, then shipped six months of fixes.
Sigma is moving data modeling out of its own UI and into the terminal.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with VictoriaMetrics.
Retool is giving its app-building agent the branching model human developers already had.
A workflow engine where the AI builds the scripts and the enterprise gates come down
Pressable is shipping near-daily, and MCP is being maintained as a peer surface to its API.
Cosmic retired AI Studio and gave its agents goals — the CMS is becoming an agent runtime.
Pipedream put OAuth on its 10,000-tool MCP server and annotated every tool read or write.
Buildkite is forcing a major agent upgrade and handing agents a shortcut through failures.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Umami and VictoriaMetrics are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Umami and VictoriaMetrics are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top Umami alternatives in Analytics are ranked by recent ship velocity. Browse the "Umami alternatives" section above for the current picks, or visit /alternatives/umami for the full list with editorial commentary on each.
Top VictoriaMetrics alternatives in Analytics are ranked by recent ship velocity. Browse the "VictoriaMetrics alternatives" section above for the current picks, or visit /alternatives/victoriametrics for the full list with editorial commentary on each.