GitHub
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
A side-by-side editorial comparison of BookStack and Skedda — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | BookStack | Skedda |
|---|---|---|
| Sector | Collab | Collab |
| Velocity score | 5.0 | 6.3 |
| Sparks · 30d | 0 | 0 |
| Top themes | self-hosted, security, permissions, documentation | workplace-management, occupancy-analytics, visitor-management, api |
| Last editorial update | 2mo ago | 13d ago |
| Website | Visit → | — |
Five security releases in four months, this one closing an import RCE
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
Skedda Companion can now be pushed to every laptop through MDM for full presence data.
Skedda's last quarter has been about making the data it collects visible and usable: Occupancy Insights, multi-venue comparison, richer visit exports, a read-only API beta and a redesigned Visits page. Skedda Companion 1.2 now installs through Intune, Jamf, Kandji or any MDM and enrols users automatically, so check-ins can be verified from laptop presence without QR codes or hardware.
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
The pattern is a substantial feature release followed by a run of point releases that are purely security, each crediting outside reporters. That cadence suggests sustained external scrutiny of the permission and import paths rather than a project shipping features in small increments. Every advisory in this run touches either permission checking or content handling on import and export — the two places where a self-hosted wiki with untrusted editors is most exposed.
Nothing in this stream points to the next feature release; on the current pattern the next tag is more likely to be another point release closing reported issues in the same permission and import surfaces.
Skedda's last quarter has been about making the data it collects visible and usable: Occupancy Insights, multi-venue comparison, richer visit exports, a read-only API beta and a redesigned Visits page. Skedda Companion 1.2 now installs through Intune, Jamf, Kandji or any MDM and enrols users automatically, so check-ins can be verified from laptop presence without QR codes or hardware.
Skedda is shifting from a booking front end to a source of workplace attendance data. Companion's MDM rollout aims at complete presence coverage, which makes the occupancy analytics and API more valuable as more laptops report in.
Expect occupancy and presence data to reach the API, since Skedda said more API capabilities are planned and Companion now feeds richer attendance data.
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BookStack or Skedda.
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
See all BookStack alternatives → · See all Skedda alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Skedda is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Skedda is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
Top BookStack alternatives in Collab are ranked by recent ship velocity. Browse the "BookStack alternatives" section above for the current picks, or visit /alternatives/bookstack for the full list with editorial commentary on each.
Top Skedda alternatives in Collab are ranked by recent ship velocity. Browse the "Skedda alternatives" section above for the current picks, or visit /alternatives/skedda for the full list with editorial commentary on each.