← Back to home
Comparison · Collab

Wiki.js vs Trilium Notes

A side-by-side editorial comparison of Wiki.js and Trilium Notes — release velocity, themes, recent moves, and the top alternatives to consider.

Wiki.js vs Trilium Notes: at a glance

FeatureWiki.jsTrilium Notes
SectorCollabCollab
Velocity score0.00.0
Sparks · 30d00
Top themeswiki, self-hosted, security-patches, maintenance-modenote-taking, fork, code-signing, mfa
Last editorial update3h ago3h ago
WebsiteVisit →Visit →

What is Wiki.js?

Wiki.js 2.x is in security-maintenance mode, and the feed has been quiet since May

Six patch releases on the 2.5 line, most of them fixes. The substantive ones are security: a permissions flaw allowing user assignment to elevated groups, open redirect validation on the login redirect cookie, authentication for GraphQL subscription WebSocket connections, prototype pollution in Rocket.Chat auth, and secure cookie flags on HTTPS sites. Two small features appear — OIDC and OAuth2 avatar claim mapping, and MySQL socket path connections.

Read the full Wiki.js trajectory →

What is Trilium Notes?

The TriliumNext fork spent its early betas making the app trustworthy to install

Three beta releases from early 2025. The work is dominated by distribution and access concerns: signed Windows binaries obtained through a donated EV certificate, signed macOS builds, multi-factor authentication that required a database version bump, basic right-to-left content support, and repaired migration paths from the original Trilium. Nothing has been published to this feed since March 2025.

Read the full Trilium Notes trajectory →

Wiki.js vs Trilium Notes: editorial side-by-side

W
Wiki.js
COLLAB
0.0

Wiki.js 2.x is in security-maintenance mode, and the feed has been quiet since May

◆ Current state

Six patch releases on the 2.5 line, most of them fixes. The substantive ones are security: a permissions flaw allowing user assignment to elevated groups, open redirect validation on the login redirect cookie, authentication for GraphQL subscription WebSocket connections, prototype pollution in Rocket.Chat auth, and secure cookie flags on HTTPS sites. Two small features appear — OIDC and OAuth2 avatar claim mapping, and MySQL socket path connections.

◆ Where it's heading

This is a mature 2.x line receiving externally reported vulnerability fixes and community contributions rather than product direction. Several fixes credit outside researchers and contributors, which is what maintenance looks like when the maintainer's attention is elsewhere. Release intervals stretched from days in January to nothing since early May.

◆ Prediction

More 2.5.x patches driven by reported vulnerabilities are the likely continuation. Nothing in this window indicates when feature work resumes.

T0.0

The TriliumNext fork spent its early betas making the app trustworthy to install

◆ Current state

Three beta releases from early 2025. The work is dominated by distribution and access concerns: signed Windows binaries obtained through a donated EV certificate, signed macOS builds, multi-factor authentication that required a database version bump, basic right-to-left content support, and repaired migration paths from the original Trilium. Nothing has been published to this feed since March 2025.

◆ Where it's heading

These are the problems a fork inherits rather than chooses. Before adding features, the project had to make installs pass platform trust checks, let users migrate off the predecessor without an intermediate upgrade, and add authentication a self-hosted note store is expected to have. It is groundwork, done in the open, with contributors credited by name.

◆ Prediction

There is not enough recent activity to predict the next release. The feed has been silent for over a year, so whether the beta line continued elsewhere is the open question.

Alternatives to Wiki.js and Trilium Notes

Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Wiki.js or Trilium Notes.

See all Wiki.js alternatives → · See all Trilium Notes alternatives →

Recent activity from Wiki.js and Trilium Notes

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 3mo agoWiki.jsARM Docker base and Windows build fixes
  2. 3mo agoWiki.jsFixes privilege escalation via group assignment
  3. 5mo agoWiki.jsOIDC avatar claims, open redirect and WebSocket auth fixes
  4. 6mo agoWiki.jsPrototype pollution and secure cookie fixes
  5. 6mo agoWiki.jsBreadcrumb and stream pipeline fixes
  6. 6mo agoWiki.jsMySQL socket path connections and search reliability
  7. 1y agoTrilium NotesMulti-factor authentication and signed Windows binaries
  8. 1y agoTrilium NotesSigned macOS builds and right-to-left content support
  9. 1y agoTrilium NotesFixes missing Windows ZIP artifacts

Frequently asked questions

What is the difference between Wiki.js and Trilium Notes?

They serve adjacent needs but don't currently overlap on shipped themes. Wiki.js and Trilium Notes are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Wiki.js better than Trilium Notes?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Wiki.js and Trilium Notes are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.

What are the best alternatives to Wiki.js?

Top Wiki.js alternatives in Collab are ranked by recent ship velocity. Browse the "Wiki.js alternatives" section above for the current picks, or visit /alternatives/wiki-js for the full list with editorial commentary on each.

What are the best alternatives to Trilium Notes?

Top Trilium Notes alternatives in Collab are ranked by recent ship velocity. Browse the "Trilium Notes alternatives" section above for the current picks, or visit /alternatives/trilium-next for the full list with editorial commentary on each.