Process Street
Process Street's public feed is an SEO content engine, not a changelog.
Comparison · PM
Wakapi vs ZenHub
A side-by-side editorial comparison of Wakapi and ZenHub — release velocity, themes, recent moves, and the top alternatives to consider.
Wakapi vs ZenHub: at a glance
| Feature | Wakapi | ZenHub |
|---|---|---|
| Sector | PM | PM |
| Velocity score | 2.5 | 0.0 |
| Sparks · 30d | 0 | 0 |
| Top themes | time-tracking, self-hosted, oidc, auth-bypass | project-management, github, mcp-integration, ai-clients |
| Last editorial update | 1h ago | 3mo ago |
| Website | Visit → | — |
What is Wakapi?
A critical auth bypass lands in the middle of Wakapi's slow identity rebuild.
Wakapi's recent releases cluster around identity and deployment rather than time tracking itself: OpenID Connect login, then an OIDC-only mode, multiple API keys per user, and a switch from Alpine to a distroless nonroot container image. The 2.17.x line has carried two security fixes now — a responsibly disclosed issue in 2.17.3, and a critical authentication bypass in 2.17.6 caused by a shared cache key namespace. Release notes are mostly bare issue numbers, so several entries state that something changed without saying what.
What is ZenHub?
GitHub-native PM remodels around sub-issues and opens up to AI clients via MCP.
ZenHub is in the middle of a structural realignment with GitHub. The April 2025 Epics-and-Projects-to-Sub-issues migration restructured the core data model on top of GitHub's sub-issue primitive, replacing Roadmap with Timeline and unlocking deeper hierarchy. The Fall 2025 release added a Zenhub MCP Server connecting Claude Desktop, Claude Code, Gemini CLI, Cursor, and Windsurf to ZenHub, plus universal API access. Recent shipping has focused on Goals & Planning panel polish (drag-and-drop, deep hierarchy, performance) and shared Saved Views with workspace defaults.
Wakapi vs ZenHub: editorial side-by-side
Wakapi
2.5PM
A critical auth bypass lands in the middle of Wakapi's slow identity rebuild.
◆ Current state
Wakapi's recent releases cluster around identity and deployment rather than time tracking itself: OpenID Connect login, then an OIDC-only mode, multiple API keys per user, and a switch from Alpine to a distroless nonroot container image. The 2.17.x line has carried two security fixes now — a responsibly disclosed issue in 2.17.3, and a critical authentication bypass in 2.17.6 caused by a shared cache key namespace. Release notes are mostly bare issue numbers, so several entries state that something changed without saying what.
◆ Where it's heading
The direction is a self-hosted tool making itself deployable somewhere other than one developer's server. External identity providers, an option to disable local login entirely, per-key credentials and a container that runs as a nonroot user are the requirements that come from someone else's security review. The 2.17.6 bypass sits awkwardly against that: a cache keyed without proper namespacing is exactly the class of bug that multi-tenant deployment surfaces, which suggests the auth work is now being exercised harder than the code was written for. Releases have also thinned to roughly one a month from a much faster earlier cadence.
◆ Prediction
The identity and packaging thread is the only sustained one in this feed, so further hardening in that area is the most likely continuation; the sparse release notes make anything more specific guesswork.
ZenHub
0.0PM
GitHub-native PM remodels around sub-issues and opens up to AI clients via MCP.
◆ Current state
ZenHub is in the middle of a structural realignment with GitHub. The April 2025 Epics-and-Projects-to-Sub-issues migration restructured the core data model on top of GitHub's sub-issue primitive, replacing Roadmap with Timeline and unlocking deeper hierarchy. The Fall 2025 release added a Zenhub MCP Server connecting Claude Desktop, Claude Code, Gemini CLI, Cursor, and Windsurf to ZenHub, plus universal API access. Recent shipping has focused on Goals & Planning panel polish (drag-and-drop, deep hierarchy, performance) and shared Saved Views with workspace defaults.
◆ Where it's heading
Two parallel arcs are visible. First, ZenHub is doubling down on its GitHub-native moat — moving the data model on top of GitHub primitives (sub-issues, projects, issue types) means its differentiation gets stronger as GitHub itself improves rather than weaker. Second, it's deliberately positioning itself in the AI-coding-tool ecosystem via MCP, betting that PM context belongs in the same surface developers already use. The May 2025 GitHub permissions update (the first scope change in 11 years) signals that even mundane plumbing is being modernized.
◆ Prediction
Expect tighter integration between MCP and the Goals & Planning hierarchy (agents that can plan a sprint, not just answer questions), additional AI-client coverage as new IDE-side MCP hosts emerge, and continued GitHub feature parity as GitHub adds more native PM primitives.
Alternatives to Wakapi and ZenHub
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Wakapi or ZenHub.
NocoBase
NocoBase runs two release lines at once while the v3 client rewrite absorbs the AI work
Hive
Hive ships in batches, and this one is all planning accuracy and admin control.
Plane
Plane ships a fortnightly digest, and the AI layer is where the real work is going.
Ever Teams
Ever Teams shipped ten tags in twelve hours and one of them touched the product
Asana
Asana's agent left the app — it now answers work questions inside Slack threads.
See all Wakapi alternatives → · See all ZenHub alternatives →
Recent activity from Wakapi and ZenHub
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 7h agoWakapiCritical auth bypass from a shared cache key namespace
- 1mo agoWakapiRelease 2.17.5
- 2mo agoWakapiRelease 2.17.4
- 4mo agoWakapiSecurity fix, relay endpoint dropped, summaries may need regenerating
- 5mo agoWakapiDistroless nonroot container image; SQLite permissions need fixing
- 6mo agoWakapiOIDC-only login mode disables local accounts
- 9mo agoZenHubShared Saved Views and Workspace Defaults
- 11mo agoZenHubFall 2025 release — Zenhub MCP Server, universal API access, Goals & Planning polish ⚡
- 1y agoZenHubWhat's new in Zenhub in July
- 1y agoZenHubWhat's new in Zenhub in June
- 1y agoZenHubRequest for new GitHub permissions
- 1y agoZenHubMigration of Epics & Projects to Sub-issues ⚡
Frequently asked questions
What is the difference between Wakapi and ZenHub?
They serve adjacent needs but don't currently overlap on shipped themes. Wakapi is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Wakapi better than ZenHub?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Wakapi is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to Wakapi?
Top Wakapi alternatives in PM are ranked by recent ship velocity. Browse the "Wakapi alternatives" section above for the current picks, or visit /alternatives/wakapi for the full list with editorial commentary on each.
What are the best alternatives to ZenHub?
Top ZenHub alternatives in PM are ranked by recent ship velocity. Browse the "ZenHub alternatives" section above for the current picks, or visit /alternatives/zenhub for the full list with editorial commentary on each.