Skip to the content
ė.coCompare

ė.co · Compare · the checklist site

Ten labs.llc tools, ticked off against their rivals.

Every review here is a matrix: the labs.llc tool in the first column, two or three named alternatives beside it, and a mark in every cell. A half-filled mark always carries a numbered note. Where we could not confirm what a rival does, the cell says so instead of guessing.

How to read a cell

  • Yes: does it
  • Partly: partly — read the note
  • No: does not
  • Not checked: not checked: no claim either way
  • Not applicable: does not apply

We are LABS, and these are our own tools. The method page says what that changes.

The matrix

The matrix · ten labs.llc tools × six checksMeasured 27 Sep 2026
Each tool’s name opens its full comparison. The three marks are about the labs.llc tool; the three text columns summarise what the review found.
Toolcheck 1Runs in your browsercheck 2Relay locked downcheck 3Measured end to endcheck 4Reads fromcheck 5The extra length it goes tocheck 6Where a rival does more
CourierUtilities · vs FilePizza and PairDropYes1Not applicablePartly2The other browser, directly; one public STUN server unless SAME NETWORK is ticked.No signalling server: two compressed codes carried by hand, then a SHA-256 receipt from the receiver.PairDrop falls back to a TURN server and finds nearby devices; FilePizza gives a plain link.
ComposerSound · vs AIVA, MuseScore Studio and FlatYes3Not applicablePartly4Nothing outside the page: VexFlow and a LAME encoder ship in its folder.A serial reproduces the same 24 bars anywhere; audio exports pass through the player's own instruments.AIVA offers 250+ styles; MuseScore Studio and Flat are full editors, Flat with sampled sounds.
Drop watchInternet · vs ExpiredDomains.net and DynadotPartly5Partly6Partly7Each registry's RDAP record, IANA and DNS over HTTPS.Prints the ICANN timetable beside every date and never calls a missing record “available”.ExpiredDomains.net finds drops across 676 endings; Dynadot tries to catch the name.
RatesMarkets · vs FRED and Freddie Mac PMMSPartly8Yes9Yes10New York Fed API, Treasury par-yield files, Freddie Mac PMMS.Prime shown as labelled arithmetic; every 2s10s inversion since 1990 shaded.FRED serves the whole series at once with downloads and alerts; Freddie Mac has history to 1971.
TrafficEarth · vs Google Maps and TomTom Traffic IndexPartly11Yes12Partly13Open city and agency feeds (NYC DOT, Madrid, VIZ Berlin, Addinsight and more), Open-Meteo, api.weather.gov.Withholds modelled speeds and counts silent detectors: 2,533 modelled links held back in Melbourne on the day.Google Maps marks incidents and travel time; TomTom ranks a year of congestion.
HurricaneEarth · vs the NHC, Tropical Tidbits and Zoom EarthNo14Yes15Yes16The NHC's active-storm file and its Atlantic and eastern Pacific outlooks.Rounds mph the Center's way, so the board matches the advisory; holds no forecast of its own.NHC has cones and probabilities; Tropical Tidbits models and invests worldwide; Zoom Earth imagery.
Travel DisruptionsWeather & the world · vs FAA NAS Status and FlightAwareNo17Yes18Partly19FAA NAS Status: the airport-events JSON and the airport-status XML.Merges two FAA documents, ranks worst first, and will not guess flight counts.FAA NAS Status adds forecast events and announcements; FlightAware tracks your flight.
PulseNews · vs Pageviews Analysis and Listen to WikipediaYes20Not applicableYes21Wikimedia EventStreams and the Wikimedia Feed API.Dates the most-read list right by asking for the next day's feed; archive floor probed.Pageviews Analysis covers any project and range with downloads; Listen to Wikipedia adds sound.
Paper TrailInternet · vs crt.sh and Cert SpotterNo22Yes23Partly24crt.sh over the public CT logs; SSLMate's API only as a whole-history fallback.Flags truncation and uses a second log only when it can return the entire history.crt.sh searches by organisation and fingerprint with no cap; Cert Spotter alerts you.
File ShareUtilities · vs WeTransfer, Wormhole and LitterboxNo25Yes26Partly27Litterbox (catbox.moe) hosts the files; labs.llc keeps only the link mapping.Splits past Litterbox's 1 GB limit and offers AES-GCM-256 with the key only in the link's fragment.Wormhole encrypts by default up to 10 GB; WeTransfer hosts files itself.
  1. 1Only one optional STUN request leaves the page; there is no relay.
  2. 2The SHA-256 was checked against FIPS vectors; no two-device transfer was timed.
  3. 3No network calls in its scripts; the share shim only rewrites preview tags.
  4. 4Serial reproduction was measured; playback and audio exports were not listened to.
  5. 5Asks the desk's own WHOIS engine first; falls back to the browser and marks the report partial.
  6. 6Same-origin, GET-only JSON by its header; we sent it no hostile input.
  7. 7Engine reports for example.com and z34.org were measured; their dates were not checked against a source outside labs.llc.
  8. 8The New York Fed and Treasury are read directly; only Freddie Mac goes through a relay.
  9. 9No parameters and one hard-coded upstream, by its code; there is no input to refuse.
  10. 10The spread matched FRED and the mortgage rate matched Freddie Mac.
  11. 11New York and Madrid are read directly; twenty cities come through a relay.
  12. 12An unlisted city gets HTTP 404.
  13. 13Relay output and the NYC feed were measured; the newest NYC reading looked about 2½ hours old.
  14. 14The NHC sends no cross-origin header, so three files come through a relay.
  15. 15An unknown feed gets HTTP 400.
  16. 16All five systems' mph matched nhc.noaa.gov.
  17. 17The FAA sends no cross-origin header; a relay reads it.
  18. 18Any parameter gets HTTP 400.
  19. 19The relay read was measured; the FAA's own app could not be fetched to cross-check.
  20. 20Wikimedia's stream and feed are read straight from the browser.
  21. 21Stream sampled; the feed's date and archive floor reproduced.
  22. 22crt.sh sends no cross-origin header; a relay asks it.
  23. 23A URL in place of a domain gets HTTP 400.
  24. 24Cold and warm reads timed, 43 and 136 certificates returned; the counts were not checked against crt.sh's own page.
  25. 25Uploads go through upload.php to Litterbox; encryption and splitting happen in the page first.
  26. 26Same-origin posts only, per-address limits; GET gets HTTP 405.
  27. 27No upload was made; the health probe was tested and misreports Litterbox.

The ten comparisons

One tool per review, two or three rivals in each

The tools were drawn at random from the labs.llc register. Each review measures the tool against the local copy of build 537, fetches every rival’s own page, and names the rows where a rival is simply better.

What the six checks mean

Runs in your browser

A tick means the work happens in the page and no labs.llc server sits between you and the source. A dash usually means the source sends no cross-origin header, so a relay is the only way to read it.

Relay locked down

Where a relay exists, can a stranger use it to fetch anything they like? Where it takes input, we sent it a bad parameter and recorded the refusal; where it takes none, the note cites the code. Tools with no relay get “n/a”.

Measured end to end

A tick means we ran the whole path on 27 September and checked the answer against something outside labs.llc. Half means part of the path went untested — the note says which part.

Reads, goes further, falls behind

The text columns name the real sources, the length the tool goes to for a better answer, and the rival that does more — in the review, each is sourced to a file and line or a fetched page.