vcfR
A genomics workhorse whose visible release feed stops dead in mid-2020.
A side-by-side editorial comparison of Auth0 and crandep — release velocity, themes, recent moves, and the top alternatives to consider.
Auth0 hands tenants a throttle on their own noisy apps
Custom Rate Limits enter Early Access, letting a tenant cap requests per second for individual clients or whole classes of them — third-party, CIMD — so one application cannot exhaust the tenant's Authentication API rate limit entitlement. Policies are configured through an API and can be rolled out in notify-only mode before they start blocking. It arrives in a dense window that also brought Flexible Password Policy to GA and Custom Prompts parity across social and enterprise connections.
Half CRAN dependency scraper, half extreme-value modelling kit — and the scraper half keeps finding bugs.
crandep does two jobs that rarely share a package: it harvests the CRAN dependency network, and it fits power-law and extreme-value mixture models to the resulting degree distributions. The 2024 releases were all model work — profile posteriors, wrappers, a constrained variant, a TZP-power-law mixture between the two- and three-component models. The 2025 releases are entirely the other half, fixing what the harvester was silently getting wrong.
Custom Rate Limits enter Early Access, letting a tenant cap requests per second for individual clients or whole classes of them — third-party, CIMD — so one application cannot exhaust the tenant's Authentication API rate limit entitlement. Policies are configured through an API and can be rolled out in notify-only mode before they start blocking. It arrives in a dense window that also brought Flexible Password Policy to GA and Custom Prompts parity across social and enterprise connections.
Two threads dominate. One is agent and delegation infrastructure — Agents as Principal, Token Vault Privileged Worker, Custom Token Exchange session delegation — all still in Early Access. The other is tenant self-service: rate limits, blocklists, organization search and roles, global search. Auth0 is systematically converting things that required support intervention into API-configurable policy.
The Early Access items now stacking up, particularly the agent-identity pieces, are the obvious GA candidates next, following the Flexible Password Policy path from Early Access to general availability.
crandep does two jobs that rarely share a package: it harvests the CRAN dependency network, and it fits power-law and extreme-value mixture models to the resulting degree distributions. The 2024 releases were all model work — profile posteriors, wrappers, a constrained variant, a TZP-power-law mixture between the two- and three-component models. The 2025 releases are entirely the other half, fixing what the harvester was silently getting wrong.
The modelling side has settled into a family of mixtures with matching wrapper and profile-posterior functions, and has not gained a new component since mid-2024. Attention has shifted to data quality in the scraper, where two consecutive releases dealt with the same class of problem: rows that should not exist because of trailing commas in CRAN's own metadata, and rows that should exist but did not because orphan packages have no edges. For a package whose science is degree distributions, missing isolated nodes is a modelling error, not a formatting one.
Expect further hardening against CRAN metadata quirks in the harvesting functions; the mixture-model side looks feature-complete and is likely to stay quiet unless a new component model is published.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Auth0 or crandep.
A genomics workhorse whose visible release feed stops dead in mid-2020.
The R phone-number package stopped only parsing numbers and started asking them where they are.
A Venn diagram package whose public release notes say almost nothing — including about its copyright cleanup.
A Shiny app for choosing the right ordinal test reached CRAN in a single 90-minute burst of tags.
A new R localization package that reached CRAN and immediately downgraded itself to experimental.
An R client for HERE's location APIs, shaped almost entirely by what the vendor exposes next.
See all Auth0 alternatives → · See all crandep alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Auth0 is currently shipping more aggressively (velocity 10.0 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Auth0 is currently shipping more aggressively (velocity 10.0 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Auth0 alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Auth0 alternatives" section above for the current picks, or visit /alternatives/auth0 for the full list with editorial commentary on each.
Top crandep alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "crandep alternatives" section above for the current picks, or visit /alternatives/crandep for the full list with editorial commentary on each.