Shopify
Shopify overhauled its admin shell and pulled Meta into its AI commerce channel layer.
A side-by-side editorial comparison of Sylius and Cody — release velocity, themes, recent moves, and the top alternatives to consider.
Sylius patched critical JWT and Host header auth vulnerabilities across three stable branches simultaneously.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
Cody batches nine ecommerce UX and analytics improvements into a single September release
Cody is an ecommerce platform handling checkout, loyalty programs, search merchandising, promotions, and analytics for online retailers. The September 16 batch release is the product's visible rhythm: a cluster of UX refinements and analytics extensions shipped together rather than continuously. GA4 tracking is getting more granular (list attribution, navigation banner events), the insights dashboard is adding conversion-rate and impressions data, and checkout messaging is becoming more precise—loyalty reward changes now surface a clear notification.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
The v2.x alpha signals a significant platform modernization effort — Symfony 8, PHP 8.3, and DBAL 4 adoption. The per-channel promotion rules feature in v2.3 is the most notable new commerce capability: it allows a single promotion to have independent configuration per sales channel, which is important for multi-region merchants with different pricing or discount strategies per market.
v2.3 will reach beta in the next release cycle; the most likely next feature push is around promotion configuration depth or checkout flow improvements to compete with more modern headless commerce platforms.
Cody is an ecommerce platform handling checkout, loyalty programs, search merchandising, promotions, and analytics for online retailers. The September 16 batch release is the product's visible rhythm: a cluster of UX refinements and analytics extensions shipped together rather than continuously. GA4 tracking is getting more granular (list attribution, navigation banner events), the insights dashboard is adding conversion-rate and impressions data, and checkout messaging is becoming more precise—loyalty reward changes now surface a clear notification.
The pattern across these entries is steady conversion-critical polishing rather than new surface area. Existing features are being made measurable (GA4 enrichment), existing data is being surfaced to merchants (insights dashboard expansions), and friction points at checkout and sign-up flows are being removed one by one. This is a platform that has its core functionality established and is iterating on the details that move conversion rate at the margin.
The sustained GA4 investment suggests the next push is toward attribution clarity for merchants—likely a built-in attribution or first-touch/last-touch report in the Cody dashboard, reducing dependence on GA4 for purchase source analysis.
Other E-comm products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Sylius or Cody.
Shopify overhauled its admin shell and pulled Meta into its AI commerce channel layer.
Virto Commerce backports a blade widget UI freeze fix across three active release trains while tightening module auth hooks
Foxy is steadily expanding its payment and shipping provider integrations via API, with FedEx OAuth and PayPal improvements leading recent work.
Snipcart's changelog is documentation pages—an MCP server and robust API suggest active developer-focused platform work, but no release timeline is visible.
CS-Cart ships one major version per quarter on a steady, predictable cycle with minimal public changelog detail.
Antavo's changelog is all thought leadership — the product roadmap is not visible in these entries.
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — ecommerce — within E-comm. Sylius and Cody are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Sylius and Cody are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other E-comm products to evaluate alongside.
Top Sylius alternatives in E-comm are ranked by recent ship velocity. Browse the "Sylius alternatives" section above for the current picks, or visit /alternatives/sylius for the full list with editorial commentary on each.
Top Cody alternatives in E-comm are ranked by recent ship velocity. Browse the "Cody alternatives" section above for the current picks, or visit /alternatives/cody-store for the full list with editorial commentary on each.