Fourwaves
Fourwaves adds custom domain support for event websites, removing the hosted-subdomain constraint for conference organizers
Comparison · Meetings
HOMER vs Greenlight
A side-by-side editorial comparison of HOMER and Greenlight — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:securityopen-source
HOMER vs Greenlight: at a glance
What is HOMER?
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
HOMER is an open-source VoIP call capture and observability platform running a rapid 11.0.x patch cadence. The 11.0.342 release closed a SQL injection vulnerability in the POST /exec endpoint by parameterizing the query, accompanied by security dependency bumps across hono, js-yaml, and gRPC. The storage layer has received parallel stability work: OTLP tables now participate in compaction and retention discovery, DuckDB temp directory configuration is pinned for tiering reliability, and Azure managed-identity orphan records are cleaned up.
What is Greenlight?
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
HOMER vs Greenlight: editorial side-by-side
HOMER
5.0MEETINGS
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
◆ Current state
HOMER is an open-source VoIP call capture and observability platform running a rapid 11.0.x patch cadence. The 11.0.342 release closed a SQL injection vulnerability in the POST /exec endpoint by parameterizing the query, accompanied by security dependency bumps across hono, js-yaml, and gRPC. The storage layer has received parallel stability work: OTLP tables now participate in compaction and retention discovery, DuckDB temp directory configuration is pinned for tiering reliability, and Azure managed-identity orphan records are cleaned up.
◆ Where it's heading
The Azure Blob Storage DuckLake backend added in 11.0.334 extends HOMER's tiering from S3-only to multi-cloud, and the subsequent Azure patches show that path is being actively maintained. The overall posture across this window is incremental hardening—security patching, dependency governance, and infrastructure reliability—rather than new user-facing features. The DuckLake integration (DuckDB + S3/Azure tiering) appears to be HOMER's infrastructure bet for handling high-volume VoIP capture at scale.
◆ Prediction
The next meaningful move is likely formal documentation and operator onboarding for the DuckLake multi-cloud storage tier; the backend is functionally in place for both S3 and Azure, and the stability patches suggest it is approaching production readiness.
Greenlight
5.0MEETINGS
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
◆ Current state
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
◆ Where it's heading
Greenlight's release cadence is maintenance-driven: security response and dependency updates rather than feature work. The 3.9.0 breaking change is the project tightening deployment requirements, likely in response to misconfiguration risks identified in security audits. The rapid hotfix points to limited pre-release testing capacity on the project.
◆ Prediction
The undisclosed 3.9.0 security fixes will be disclosed within weeks and likely explain the URL_HOST mandate — deployments without it were probably vulnerable to host header injection or similar configuration-dependent attacks.
Alternatives to HOMER and Greenlight
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either HOMER or Greenlight.
BigBlueButton
BigBlueButton 4.0 enters release candidate with LiveKit fully replacing the legacy audio stack.
JW Player
JW Player automates CMAF rendition ladders and sharpens ad attribution by player and placement
Nextcloud Talk Desktop
Nextcloud Talk Desktop is approaching Talk v25 stable while its July managed-config feature unlocks enterprise mass deployment for the first time.
Nextcloud Talk
Nextcloud Talk v25 adds classified conversations and an owner role, targeting regulated enterprise deployments.
Element Call
Element Call is removing its legacy architecture — the federated multi-SFU model is now the only option.
See all HOMER alternatives → · See all Greenlight alternatives →
Recent activity from HOMER and Greenlight
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 8h agoHOMER11.0.345
- 1d agoHOMER11.0.344
- 4d agoHOMER11.0.343
- 6d agoHOMER11.0.342
- 7d agoGreenlightGreenlight 3.9.0.1: startup crash hotfix
- 7d agoGreenlightGreenlight 3.9.0: mandatory URL_HOST and undisclosed security fixes
- 7d agoHOMER11.0.341
- 7d agoHOMER11.0.340
- 1mo agoGreenlightGreenlight 3.8.2.4: security gem updates
- 4mo agoGreenlightGreenlight 3.8.2.3: security updates and translations
- 4mo agoGreenlightGreenlight 3.8.2.2: HTML support in maintenance banner
- 5mo agoGreenlightGreenlight 3.8.2.1: host configuration bypass option
Frequently asked questions
What is the difference between HOMER and Greenlight?
Both compete on the same themes — security, open-source — within Meetings. HOMER and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is HOMER better than Greenlight?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. HOMER and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
What are the best alternatives to HOMER?
Top HOMER alternatives in Meetings are ranked by recent ship velocity. Browse the "HOMER alternatives" section above for the current picks, or visit /alternatives/homer-voip for the full list with editorial commentary on each.
What are the best alternatives to Greenlight?
Top Greenlight alternatives in Meetings are ranked by recent ship velocity. Browse the "Greenlight alternatives" section above for the current picks, or visit /alternatives/greenlight for the full list with editorial commentary on each.