Robusta
Robusta's 0.54.0 alpha returns to features: Prometheus tenants by namespace and Holmes fixes.
A side-by-side editorial comparison of Verdaccio and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
Verdaccio's v9 pre-release counter hits 42, and the notes still say nothing
Verdaccio pushed another lockstep version bump across its monorepo on 4 November, taking the main package to 9.0.0-next-9.42. Every package points to the same pull request, a version update, with no feature or fix notes attached.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Verdaccio pushed another lockstep version bump across its monorepo on 4 November, taking the main package to 9.0.0-next-9.42. Every package points to the same pull request, a version update, with no feature or fix notes attached.
The v9 line keeps iterating under the next-9 pre-release tag with no changelog detail in the feed. A general release has looked close since September and still has not shipped.
More next-9 bumps are likely; the feed gives no signal of when 9.0.0 GA lands.
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Every 1.38 release since June has been mostly authorization and memory-safety work. The 1.38.0 feature set (RBAC, WebRTC, the monitor function split) is being made safe rather than extended.
Further security releases on 1.38 are likely; the entries give no sign of a 1.39 feature release.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Verdaccio or ZoneMinder.
Robusta's 0.54.0 alpha returns to features: Prometheus tenants by namespace and Holmes fixes.
ShenYu is cutting 2.7.2 release candidates, but the tags still carry no notes.
k0s ships another four-branch patch round, with an IPv6 service CIDR fix on 1.37 and 1.36.
Honeycomb's Canvas now remembers your systems and lays out each investigation in sections.
AdGuard Home's stable line takes a Go security update and turns off Multipath TCP.
Gloo Gateway 1.20.29 stops a failed restart from wiping every Envoy's config
See all Verdaccio alternatives → · See all ZoneMinder alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Verdaccio and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Verdaccio and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Verdaccio alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Verdaccio alternatives" section above for the current picks, or visit /alternatives/verdaccio for the full list with editorial commentary on each.
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.