compare
alf.io vs Indico
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | alf.io | Indico |
|---|---|---|
| Language | Java | Python |
| Licence | GPL-3.0 | MIT |
| Stars | 1.6k | 2.1k |
| Latest | 2.0-M5-2609 | v3.3.13 |
| Last push | 2026-10-05 | 2026-10-06 |
| Release cadence | about 160 days between releases | about 46 days between releases |
| Active contributors | 2 commit authors on the default branch in the last 90 days | 17 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Eventbrite. Alternatives to Eventbrite →
Full replacementalf.ioTicket reservation for conferences and meetups, with check-in and payments through Stripe or PayPal.
PartialIndicoRegistration, timetables, abstracts and room booking for conferences and meetings.
alf.io
- 2.0-M5-26092026-09-18Alf.io 2.0-M5-2609
- 2.0-M5-26062026-06-02Improper Access Control for Organization Owners Exposes System Secrets CVE-2026-50165 reported by @wodzen
- 2.0-M5-2509-12025-09-10Alf.io 2.0-M5-2509-1
- 2.0-M5-25092025-09-08add purple color for badge color selection
- 2.0-M5-25022025-02-08refactor ticket category availability rest api + index controller
Indico
- v3.3.132026-08-25Fix an XSS vulnerability when resolving conflicts between concurrent edits to minutes (GHSA-cw24-x4mj-fw3q)
- v3.3.122026-03-23Fix LaTeX sanitization to prevent malicious users from running unsafe LaTeX commands through specially crafted abstract…
- v3.3.112026-02-27Add missing access checks when managing event series (CVE-2026-28352, thanks @lighthousekeeper1212)
- v3.3.102026-02-17Fix potential SSRF issues by disallowing outgoing requests to private/internal/local IP addresses when the URL is user-…
- v3.3.92025-12-11Fix an open redirect which could help making harmful URLs look more trustworthy by linking to Indico and having it redi…
alf.io
✓ signed The latest release, 2.0-M5-2609, carries a signature GitHub verified.
Loading the security report
Indico
✓ signed The latest release, v3.3.13, carries a signature GitHub verified.
Loading the security report