docs: fix and annotate research links after link check
Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
Lucas Winther
co-authored by
Claude Opus 5.5
Claude Opus 5.5
parent
15740a054f
commit
071910f5f5
@@ -18,3 +18,12 @@ Background research ported from earlier work (2026-10-29) and sanitized for clea
|
||||
## Intentionally excluded
|
||||
|
||||
The original research also contained architecture notes produced from a source-code read of n8n, covering how its feature gating is implemented. They were left out on purpose and must not be brought into this repository. STaurtomation contributors must not read the source code of n8n, Kestra, Windmill or Activepieces, or of forks of them such as the sreent/n8n "tuflow" fork, and must not read descriptions derived from that source.
|
||||
|
||||
## Link check (2026-10-30)
|
||||
|
||||
All 151 links were checked with an automated HTTP request. Dead or unreachable links are marked
|
||||
inline. These returned 403/429/999 to scripted requests (bot blocking; likely fine in a browser, not
|
||||
verified): axios.com, linkedin.com, funding.tech.eu, lumadock.com, neura.market, news.hada.io,
|
||||
repos.ecosyste.ms (402), trademark.justia.com, dorsey.com, fieldfisher.com, g2.com, jenner.com,
|
||||
vondranlegal.com. A mintlify.com mirror of n8n's repository docs was replaced with the official
|
||||
docs.n8n.io page, and a third-party Authelia mirror with authelia.com.
|
||||
|
||||
@@ -160,7 +160,7 @@ The main criticisms: the enterprise features most teams need (SSO from $200/mo,
|
||||
- Reviews disagree on what is paywalled (SSO/SAML, audit logs, branding, RBAC, white-label). One notes that having the source does not grant rights to the commercial modules. — [ohaiknow](https://ohaiknow.com/reviews/activepieces/), [opsily (managed-n8n vendor, biased)](https://opsily.com/hosting/n8n/activepieces-self-hosted-limitations), [baeseokjae](https://baeseokjae.github.io/posts/activepieces-review-2026/)
|
||||
- Single-source claims: no sub-flow architecture, more manual error handling, a loop step failing silently on empty arrays, no native flow version control. — [syncgtm](https://syncgtm.com/blog/activepieces-review). The sub-flow claim conflicts with the product's documented Subflows piece; the versioning claim is unverified.
|
||||
- Smaller catalog (300+ vs Zapier's 7,000+), and some pieces have few triggers/actions. — [syncgtm](https://syncgtm.com/blog/activepieces-review), [workflowautomation.net](https://workflowautomation.net/reviews/activepieces)
|
||||
- Sparse or outdated docs for Kubernetes, multi-tenant, and enterprise SSO. Community-only support (Discord/GitHub) on free. No SOC 2 / HIPAA BAA for self-hosted. — [review roundup via search: noviqip](https://noviqip.com/blogs/guides/activepieces-review-2026), [digioffly](https://digioffly.com/activepieces-review/)
|
||||
- Sparse or outdated docs for Kubernetes, multi-tenant, and enterprise SSO. Community-only support (Discord/GitHub) on free. No SOC 2 / HIPAA BAA for self-hosted. — [review roundup via search: noviqip](https://noviqip.com/blogs/guides/activepieces-review-2026), [digioffly](https://digioffly.com/activepieces-review/) (unreachable as of 2026-10-30)
|
||||
- n8n is seen as more flexible and powerful for code-heavy users, while G2 reviewers praise Activepieces' easy setup. — [G2 compare](https://www.g2.com/compare/activepieces-vs-n8n), [agntable](https://www.agntable.com/blog/activepieces-vs-n8n)
|
||||
- Default `AP_EXECUTION_MODE=UNSANDBOXED` in CE. The docs call sandboxing "the most important security decision for multi-tenant deployments". — [docs: workers](https://www.activepieces.com/docs/install/architecture/workers), [docs: environment variables](https://www.activepieces.com/docs/install/reference/environment-variables)
|
||||
- The docs themselves warn that the default `AP_WORKER_CONCURRENCY=5` "widens the OOM blast radius", and that `AP_PREWARM_CACHE_ON_STARTUP` can OOM small workers. — [docs: workers](https://www.activepieces.com/docs/install/architecture/workers), [docs: environment variables](https://www.activepieces.com/docs/install/reference/environment-variables)
|
||||
|
||||
@@ -123,7 +123,7 @@ Community health is strong and well funded. The repo has about 30.1k GitHub star
|
||||
- 30.1k stars, 3.5k forks, 169 watchers, about 13.4k commits. The contributor count was not shown on the page — [GitHub](https://github.com/kestra-io/kestra)
|
||||
- Release cadence: roughly weekly. v2.0.4 (29 Sep), v2.0.5 (5 Oct), v2.0.6 (13 Oct), v2.0.7 (20 Oct), v2.0.8 (27 Oct), each shipped alongside a 1.3.x patch (v1.3.41 to v1.3.45) — [GitHub releases](https://github.com/kestra-io/kestra/releases)
|
||||
- 2.0 is an LTS release with one year of backported fixes. Launch post dated 8 Sep 2026 — [2.0 blog](https://kestra.io/blogs/release-2-0); [web search summary of Anna Geller's LinkedIn](https://de.linkedin.com/in/geller-anna)
|
||||
- Funding: $25M Series A on 31 Mar 2026, led by RTP Global with Alven, ISAI and Axeleo, about $36M total. Earlier: an $8M seed led by Alven (Sep 2024). Tech.eu lists €22M / €29M total, which is a currency or conversion discrepancy — [The Next Web](https://thenextweb.com/news/orchestration-platform-kestra-raises-25m); [Alven](https://alven.co/kestra-raises-8m-to-lead-the-future-of-orchestration-for-business-critical-workflows); [tech.eu](https://funding.tech.eu/companies/B53F386F-689A-4978-B511-29985B65967F)
|
||||
- Funding: $25M Series A on 31 Mar 2026, led by RTP Global with Alven, ISAI and Axeleo, about $36M total. Earlier: an $8M seed led by Alven (Sep 2024). Tech.eu lists €22M / €29M total, which is a currency or conversion discrepancy — [The Next Web](https://thenextweb.com/news/orchestration-platform-kestra-raises-25m); [Alven](https://alven.co/kestra-raises-8m-to-lead-the-future-of-orchestration-for-business-critical-workflows) (dead link as of 2026-10-30); [tech.eu](https://funding.tech.eu/companies/B53F386F-689A-4978-B511-29985B65967F)
|
||||
- Traction claims (vendor): enterprise revenue up 25x in 18 months, over 2B workflows executed in 2025, and Apple engineers among its users — [The Next Web](https://thenextweb.com/news/orchestration-platform-kestra-raises-25m); [Pulse 2.0](https://pulse2.com/kestra-25-million-raised-for-open-source-orchestration-platform-expansion/amp/)
|
||||
- Older snapshot comparison: n8n had about 184.8k stars versus Kestra's about 26.7k — [openalternative.co](https://openalternative.co/compare/kestra/vs/n8n)
|
||||
- The company is French; the CTO built the precursor at the game publisher Ankama for distributed cron jobs — [Pulse 2.0 interview](https://pulse2.com/kestra-profile-ludovic-dehon-interview/)
|
||||
|
||||
@@ -57,7 +57,7 @@ Several "gated" capabilities have free near-equivalents. Pruning and concurrency
|
||||
- External backend hooks are registered with `EXTERNAL_HOOK_FILES`. They are plain JS files that run server-side and include hooks such as `n8n.ready` and `frontend.settings` — [n8n docs: external hooks](https://docs.n8n.io/hosting/configuration/external-hooks) [V, via search summary]. External hooks are not on the CE exclusion list, and a community member reports they work without a license key — [community thread, 2026-03/04](https://community.n8n.io/t/question-about-sso-via-custom-hooks-and-sul-compliance/283373) [V]
|
||||
- A NixOS deployment puts n8n behind oauth2-proxy with Kanidm. An external hook logs users in automatically from the `X-Email` header. The hook code is not shown — [git.thalheim.io dotfiles](https://git.thalheim.io/janet/dotfiles/src/branch/main/machines/eve/modules/n8n) [V, via search summary]
|
||||
- `cweagans/n8n-oidc` describes itself as "bolt-on OIDC support for n8n" (JavaScript). An aggregator lists its last push as 2025-12-29 with 2 open issues. I did not check this on GitHub — [GitTrend](https://gittrend.io/repo/cweagans/n8n-oidc) [V, aggregator]. A forum reply also names `n8n-oidc` and `n8n-community-sso`. A search for the latter found no such project — [community thread](https://community.n8n.io/t/question-about-sso-via-custom-hooks-and-sul-compliance/283373) [V]
|
||||
- Proxy-gateway SSO is a known pattern: Authelia, Authentik, Pomerium, or Cloudflare Access enforce IdP MFA and groups before a request reaches n8n. n8n's own login still applies unless a hook maps the header to a session — [lumadock guide](https://lumadock.com/tutorials/n8n-sso-options) (403 on fetch; content seen only as a search summary) [V-partial]. Header trust is safe only if the backend is reachable solely through the proxy — [Authelia nginx docs](https://gitea.unej.ac.id/techies/authelia/raw/commit/bd5bb497e3cbcb6c54f1b150db70a97564e6b6ee/docs/proxies/nginx.md) [V, via search]
|
||||
- Proxy-gateway SSO is a known pattern: Authelia, Authentik, Pomerium, or Cloudflare Access enforce IdP MFA and groups before a request reaches n8n. n8n's own login still applies unless a hook maps the header to a session — [lumadock guide](https://lumadock.com/tutorials/n8n-sso-options) (403 on fetch; content seen only as a search summary) [V-partial]. Header trust is safe only if the backend is reachable solely through the proxy — [Authelia nginx docs](https://www.authelia.com/integration/proxies/nginx/) [V, via search]
|
||||
- Git backup and sync community tooling: n8n.io template 12721 offers bidirectional GitHub sync. It detects new, edited, renamed, and deleted workflows, runs a daily backup, and has a manual restore path — [n8n template 12721](https://n8n.io/workflows/12721-back-up-and-restore-n8n-workflows-with-github-sync/). Template 7304 does backups with change detection and name-based filenames — [n8n template 7304](https://n8n.io/workflows/7304-automated-workflow-backup-with-intelligent-change-detection-using-github/). The forum's "Ultimate GitHub ↔ n8n Workflow Backup System" adds a UI and lets you import from any commit — [community.n8n.io](https://community.n8n.io/t/the-ultimate-github-n8n-workflow-backup-system-with-ui-and-commit-level-visibility/181003). `wapad/n8n-data-manager` is a shell script that backs up and restores workflows, credentials, and env to GitHub — [ecosyste.ms topic](https://repos.ecosyste.ms/topics/workflow-backup) [V, via search]
|
||||
- [K] CLI: `n8n export:workflow --all --separate --backup --output=dir/`, `n8n export:credentials --all [--decrypted]`, `n8n import:workflow --separate --input=dir/`, `n8n import:credentials`. Public REST API (`/api/v1/workflows`, `/executions`, `/credentials`, `/tags`) with `X-N8N-API-KEY`, available on CE. Security audit with `n8n audit` CLI / `POST /api/v1/audit` (risk report, not an event log). Logging with `N8N_LOG_LEVEL` and `N8N_LOG_OUTPUT=console,file`, `N8N_LOG_FILE_LOCATION`. Credential overwrites with `CREDENTIALS_OVERWRITE_DATA` (JSON per credential type) or `CREDENTIALS_OVERWRITE_ENDPOINT`. Docker secrets through `_FILE`-suffixed env vars. Queue mode with `EXECUTIONS_MODE=queue` plus Redis (`QUEUE_BULL_REDIS_*`) and `n8n worker` processes. Error Workflow (Error Trigger node) is free.
|
||||
|
||||
@@ -129,7 +129,7 @@ Most "open-core" alternatives gate the same enterprise set as n8n: SSO, RBAC, au
|
||||
|
||||
### Cited Findings
|
||||
- **Windmill** Community Edition caps SSO users at 10, users at 50, workspaces at 3, and groups at 4. Git sync works for up to 2 users. There are no audit logs, no external secret backends (Vault/AKV/AWS SM), no multiplayer, no agent workers, no worker-group management UI, no autoscaling, and no concurrency limits. SAML and SCIM are Enterprise — [Windmill pricing](https://www.windmill.dev/pricing) [V]. The license is not stated on the pricing page. [K] The core is AGPLv3, with EE features under a proprietary license.
|
||||
- **Activepieces** pricing: Free $0 (1,000 credits, 5 users), Plus $20/mo, Team $200/mo (25 users, SSO and standard roles), Ultimate custom (SCIM, custom RBAC, audit logs, secret managers, Git sync/releases, branding), Embed from $36k/yr — [Activepieces pricing](https://www.activepieces.com/pricing) [V]. The core is MIT; enterprise code is under a commercial license — [Activepieces license docs](https://www.activepieces.com/docs/about/license) [V, via search]. Sources disagree on whether CE lacks projects, SSO, audit, and Git sync (third-party summary) or has "all features" (vendor editions page) — [editions](https://activepieces.com/docs/about/editions) [V, conflicting]
|
||||
- **Activepieces** pricing: Free $0 (1,000 credits, 5 users), Plus $20/mo, Team $200/mo (25 users, SSO and standard roles), Ultimate custom (SCIM, custom RBAC, audit logs, secret managers, Git sync/releases, branding), Embed from $36k/yr — [Activepieces pricing](https://www.activepieces.com/pricing) [V]. The core is MIT; enterprise code is under a commercial license — [Activepieces license docs](https://www.activepieces.com/docs/about/license) [V, via search]. Sources disagree on whether CE lacks projects, SSO, audit, and Git sync (third-party summary) or has "all features" (vendor editions page) — [editions](https://www.activepieces.com/docs/about/license) [V, conflicting]
|
||||
- **Kestra** OSS is Apache 2.0 at $0 and includes Git integration/versioning. Enterprise adds SSO (OIDC, LDAP, SCIM), RBAC, audit logs, secrets managers, multi-tenancy, worker groups, and namespace-level secrets/variables. It is sold as an annual per-instance subscription with no listed price — [Kestra pricing](https://kestra.io/pricing) [V]
|
||||
- [K, not re-verified] **Node-RED**: Apache-2.0, no paid tier in core. Its multi-user/auth support is basic (admin auth with a passport strategy allows OIDC/OAuth). FlowFuse sells team and enterprise features. **Huginn**: MIT, fully free, multi-user, aging. **Automatisch**: AGPL-3.0 core with enterprise features under a commercial license (SSO/SAML gated). **Apache Airflow**: Apache-2.0, all features free (RBAC, OAuth/LDAP via FAB auth manager, logs to remote stores), but it is code-first, not low-code. **Temporal**: MIT server, all features free self-hosted (Temporal Cloud is paid); code-first.
|
||||
- This part of the research (search-engine results only) found no reporting of an n8n fork that unlocks enterprise features — [search results summary](https://jimmysong.io/en/blog/n8n-deep-dive/) [V, negative result]. The licensing research did find that such forks exist; see [n8n-licensing-legal.md §7](n8n-licensing-legal.md) (they are not named).
|
||||
|
||||
@@ -218,7 +218,7 @@ There is no importer. Windmill itself states: "No, there is no automated n8n-to-
|
||||
|
||||
— [windmill.dev/compare/n8n](https://www.windmill.dev/compare/n8n)
|
||||
- The CFA Institute case study (vendor-published, January 2026): the SRE team evaluated Windmill for about a year and fully migrated off n8n in early 2025. "We were very quickly able to get our scripts out of n8n and transitioned over"; "only brief training sessions" were needed. Their reasons for leaving were wanting real programming capabilities and Git workflows. They run 25 synthetic tests every 5 minutes on Windmill Cloud EE. No workflow count or effort figure is given. — [CFA Institute case study](https://www.windmill.dev/case-studies/cfa-institute)
|
||||
- n8n workflows can be exported as JSON via the CLI (`--backup` = `--all --pretty --separate`), but credential secrets stay encrypted in the n8n database. — [n8n CLI import/export](https://www.mintlify.com/n8n-io/n8n/cli/import-export)
|
||||
- n8n workflows can be exported as JSON via the CLI (`--backup` = `--all --pretty --separate`), but credential secrets stay encrypted in the n8n database. — [n8n CLI import/export](https://docs.n8n.io/hosting/cli-commands/)
|
||||
- One third-party anecdote: Windmill's rollout took 9 days including SSO, against 3 days for n8n, for two UK clients. The author flags the small sample. — [automationatlas.io](https://automationatlas.io/guides/n8n-vs-windmill-2026-comparison/)
|
||||
|
||||
### Inferences
|
||||
@@ -238,7 +238,7 @@ The recurring criticisms are these: it is a developer-only tool with a steeper l
|
||||
- On HN commentary about Windmill's benchmark claims, commenters said predictable per-job performance under concurrency matters more than raw speed. — [GeekNews summary (2023-11)](https://news.hada.io/topic?id=12005) (secondhand, older)
|
||||
- An unverified community anecdote describes a problematic workflow affecting a broader instance. The source suggests checking worker isolation and resource limits. — [airframe.ai analysis](https://www.airframe.ai/product/windmill-dev/analysis) (low reliability)
|
||||
- "Windmill's curve is steeper"; the integration catalog is "smaller and closer to developer-leaning targets"; teams need per-language worker pools. — [automationatlas.io](https://automationatlas.io/guides/n8n-vs-windmill-2026-comparison/)
|
||||
- Self-hosting is a "slightly more complex due to multi-service architecture" setup. The question is framed as "do you want to click or do you want to type?", and for non-developers setting up webhooks, "n8n wins". — [Railway compare](https://railway.com/deploy/n8n-vs-windmill) (promotional)
|
||||
- Self-hosting is a "slightly more complex due to multi-service architecture" setup. The question is framed as "do you want to click or do you want to type?", and for non-developers setting up webhooks, "n8n wins". — [Railway compare](https://railway.com/deploy/n8n-vs-windmill) (dead link as of 2026-10-30) (promotional)
|
||||
- Postgres 18 is the default, and older data volumes (16 or earlier) block startup until you migrate. This is an upgrade friction point. — [Self-host docs](https://www.windmill.dev/docs/advanced/self_host)
|
||||
- The legacy low-code app editor is now labeled "legacy" in favor of full-code React or Svelte apps. — [Docs intro](https://www.windmill.dev/docs/intro)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user