Fourwaves
Fourwaves adds custom domain support for event websites, removing the hosted-subdomain constraint for conference organizers
A side-by-side editorial comparison of Greenlight and HOMER — release velocity, themes, recent moves, and the top alternatives to consider.
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
HOMER is an open-source VoIP call capture and observability platform running a rapid 11.0.x patch cadence. The 11.0.342 release closed a SQL injection vulnerability in the POST /exec endpoint by parameterizing the query, accompanied by security dependency bumps across hono, js-yaml, and gRPC. The storage layer has received parallel stability work: OTLP tables now participate in compaction and retention discovery, DuckDB temp directory configuration is pinned for tiering reliability, and Azure managed-identity orphan records are cleaned up.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
Greenlight's release cadence is maintenance-driven: security response and dependency updates rather than feature work. The 3.9.0 breaking change is the project tightening deployment requirements, likely in response to misconfiguration risks identified in security audits. The rapid hotfix points to limited pre-release testing capacity on the project.
The undisclosed 3.9.0 security fixes will be disclosed within weeks and likely explain the URL_HOST mandate — deployments without it were probably vulnerable to host header injection or similar configuration-dependent attacks.
HOMER is an open-source VoIP call capture and observability platform running a rapid 11.0.x patch cadence. The 11.0.342 release closed a SQL injection vulnerability in the POST /exec endpoint by parameterizing the query, accompanied by security dependency bumps across hono, js-yaml, and gRPC. The storage layer has received parallel stability work: OTLP tables now participate in compaction and retention discovery, DuckDB temp directory configuration is pinned for tiering reliability, and Azure managed-identity orphan records are cleaned up.
The Azure Blob Storage DuckLake backend added in 11.0.334 extends HOMER's tiering from S3-only to multi-cloud, and the subsequent Azure patches show that path is being actively maintained. The overall posture across this window is incremental hardening—security patching, dependency governance, and infrastructure reliability—rather than new user-facing features. The DuckLake integration (DuckDB + S3/Azure tiering) appears to be HOMER's infrastructure bet for handling high-volume VoIP capture at scale.
The next meaningful move is likely formal documentation and operator onboarding for the DuckLake multi-cloud storage tier; the backend is functionally in place for both S3 and Azure, and the stability patches suggest it is approaching production readiness.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Greenlight or HOMER.
Fourwaves adds custom domain support for event websites, removing the hosted-subdomain constraint for conference organizers
BigBlueButton 4.0 enters release candidate with LiveKit fully replacing the legacy audio stack.
JW Player automates CMAF rendition ladders and sharpens ad attribution by player and placement
Nextcloud Talk Desktop is approaching Talk v25 stable while its July managed-config feature unlocks enterprise mass deployment for the first time.
Nextcloud Talk v25 adds classified conversations and an owner role, targeting regulated enterprise deployments.
Element Call is removing its legacy architecture — the federated multi-SFU model is now the only option.
See all Greenlight alternatives → · See all HOMER alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — security, open-source — within Meetings. Greenlight and HOMER are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Greenlight and HOMER are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top Greenlight alternatives in Meetings are ranked by recent ship velocity. Browse the "Greenlight alternatives" section above for the current picks, or visit /alternatives/greenlight for the full list with editorial commentary on each.
Top HOMER alternatives in Meetings are ranked by recent ship velocity. Browse the "HOMER alternatives" section above for the current picks, or visit /alternatives/homer-voip for the full list with editorial commentary on each.