Cody
Cody batches nine ecommerce UX and analytics improvements into a single September release
A side-by-side editorial comparison of Sylius and SpotOn — release velocity, themes, recent moves, and the top alternatives to consider.
Sylius patched critical JWT and Host header auth vulnerabilities across three stable branches simultaneously.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
SpotOn puts an AI voice agent on the phone line restaurants cannot answer.
The August digest leads with Maple's AI voice agent answering calls the business misses — day, night or mid-rush — alongside reorganized Teamwork settings. It is the first time a voice agent has appeared anywhere in this feed, which until now has described invoicing, dashboards, hardware reliability and staff tooling. The digests are teasers that link out, so the scope of the rollout is not readable from the feed itself.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
The v2.x alpha signals a significant platform modernization effort — Symfony 8, PHP 8.3, and DBAL 4 adoption. The per-channel promotion rules feature in v2.3 is the most notable new commerce capability: it allows a single promotion to have independent configuration per sales channel, which is important for multi-region merchants with different pricing or discount strategies per market.
v2.3 will reach beta in the next release cycle; the most likely next feature push is around promotion configuration depth or checkout flow improvements to compete with more modern headless commerce platforms.
The August digest leads with Maple's AI voice agent answering calls the business misses — day, night or mid-rush — alongside reorganized Teamwork settings. It is the first time a voice agent has appeared anywhere in this feed, which until now has described invoicing, dashboards, hardware reliability and staff tooling. The digests are teasers that link out, so the scope of the rollout is not readable from the feed itself.
SpotOn has spent the year making the back office faster — payments, dashboards, scheduling, hardware. A voice agent is a different kind of move: instead of speeding up work a staff member does, it removes the staff member from the interaction entirely for calls nobody was picking up. That reframes the point of sale as a system that transacts with customers directly rather than one that equips employees to. The monthly cadence and the marketing register of these posts stay constant.
The obvious next step is connecting the voice agent to the ordering and reservation systems it sits beside, so a caught call becomes a booking or an order without staff involvement. Because these digests only tease, expect the detail to surface in the linked release notes rather than the feed.
Other E-comm products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Sylius or SpotOn.
Cody batches nine ecommerce UX and analytics improvements into a single September release
Shopify overhauled its admin shell and pulled Meta into its AI commerce channel layer.
Virto Commerce backports a blade widget UI freeze fix across three active release trains while tightening module auth hooks
Foxy is steadily expanding its payment and shipping provider integrations via API, with FedEx OAuth and PayPal improvements leading recent work.
Snipcart's changelog is documentation pages—an MCP server and robust API suggest active developer-focused platform work, but no release timeline is visible.
CS-Cart ships one major version per quarter on a steady, predictable cycle with minimal public changelog detail.
See all Sylius alternatives → · See all SpotOn alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. SpotOn is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. SpotOn is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other E-comm products to evaluate alongside.
Top Sylius alternatives in E-comm are ranked by recent ship velocity. Browse the "Sylius alternatives" section above for the current picks, or visit /alternatives/sylius for the full list with editorial commentary on each.
Top SpotOn alternatives in E-comm are ranked by recent ship velocity. Browse the "SpotOn alternatives" section above for the current picks, or visit /alternatives/spoton for the full list with editorial commentary on each.