Update or Wait

How verdicts work

Update or Wait watches official release sources for each product — vendor RSS feeds, GitHub releases, vendor release-note pages and endoflife.date — and creates a page for every stable release.

Community reports. Every few hours we search the relevant subreddits for posts that mention each recent version. Each post is labelled problem, fine or mention by a small AI model, cross-checked with keyword rules. Visitors can also vote "updated fine" or "it broke something" once per release.

CVEs. CVE IDs named in release notes are linked directly. We also query the NIST National Vulnerability Database and link CVEs whose description says they are fixed in (or affect versions before) a specific release.

Calibration. People post when an update breaks something and rarely when it doesn't, and popular products get more posts of every kind. So we compare each release with what is typical for that product (the median number of problem reports per release), count ordinary discussion of a version as weak evidence that it's being used normally, and ask for more evidence before flagging a release that has been out for weeks.

Verdicts.

Verdicts are automated and can be wrong. A quiet release is not a guaranteed-safe release, and security updates may be worth installing promptly even when some users report issues. Always back up first.

Update or Wait is independent and not affiliated with any vendor listed.