ToolJet
ToolJet bundles its MCP server into the EE image as AI builder features land in the LTS track
Comparison · Infra & APIs
Certbot vs Skipper
A side-by-side editorial comparison of Certbot and Skipper — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:open-source
Certbot vs Skipper: at a glance
What is Certbot?
Certbot is consolidating its plugin architecture and quietly expanding into IP address certificate support.
Certbot is in a steady maintenance and architectural consolidation phase. The nginx and apache plugins have been moved into the core certbot package as private modules (certbot-apache and certbot-nginx now exist primarily to register the plugin), the OCSP module is deprecated, and pyOpenSSL dependencies are being systematically removed in favor of the cryptography library. Version 5.8.0 bumped the cryptography floor to >=47.0.0 and fixed a bug where removed domains were omitted from renewal confirmation prompts — a correctness issue for users who remove SANs from existing certificates.
What is Skipper?
Skipper patches three real routing correctness bugs and ships multiarch Docker images in a dense fix cycle.
Skipper is in a high-cadence maintenance run — seven patch releases this week, almost all fixes and dependency bumps. The substantive changes address actual routing correctness: a bug where modResponseHeader silently dropped all but the first cookie (affecting any backend that sets multiple cookies), a float serialization failure that broke valid canary routes with small Traffic() probabilities, and a documentation error that caused filter names copied from the docs to fail silently. The multiarch Docker image in v0.27.108 is the week's only net-new capability.
Certbot vs Skipper: editorial side-by-side
Certbot
2.5INFRA · APIS
Certbot is consolidating its plugin architecture and quietly expanding into IP address certificate support.
◆ Current state
Certbot is in a steady maintenance and architectural consolidation phase. The nginx and apache plugins have been moved into the core certbot package as private modules (certbot-apache and certbot-nginx now exist primarily to register the plugin), the OCSP module is deprecated, and pyOpenSSL dependencies are being systematically removed in favor of the cryptography library. Version 5.8.0 bumped the cryptography floor to >=47.0.0 and fixed a bug where removed domains were omitted from renewal confirmation prompts — a correctness issue for users who remove SANs from existing certificates.
◆ Where it's heading
The architectural direction is a leaner, more self-contained core with fewer external dependencies. The IP address issuance capability added across the 5.3-5.4 cycle reflects Let's Encrypt's expanding IP certificate program — Certbot is tracking the CA's capabilities rather than driving its own feature agenda. The pyOpenSSL removal, when complete, will eliminate a long-standing external dependency that complicated builds and tested certification paths.
◆ Prediction
pyOpenSSL removal will complete in a future major release. IP address certificate workflows will mature as Let's Encrypt's IP cert program broadens. The certbot-nginx/certbot-apache split (now thin wrappers over the core package) may eventually collapse entirely.
Skipper
7.5INFRA · APIS
Skipper patches three real routing correctness bugs and ships multiarch Docker images in a dense fix cycle.
◆ Current state
Skipper is in a high-cadence maintenance run — seven patch releases this week, almost all fixes and dependency bumps. The substantive changes address actual routing correctness: a bug where modResponseHeader silently dropped all but the first cookie (affecting any backend that sets multiple cookies), a float serialization failure that broke valid canary routes with small Traffic() probabilities, and a documentation error that caused filter names copied from the docs to fail silently. The multiarch Docker image in v0.27.108 is the week's only net-new capability.
◆ Where it's heading
Skipper is in a hardening phase with no apparent new feature direction in recent releases. The multiarch image signals infrastructure modernization for mixed-hardware Kubernetes deployments. Historically, Skipper alternates between fix-heavy runs and feature batches; this dense patch cycle suggests a feature release could follow. The active dependency bumping keeps the dependency graph current but adds no user-visible capability.
◆ Prediction
Expect continued patch releases before any new filter types or routing capabilities land. Multiarch support may expand to additional registry targets, and the recent focus on route serialization correctness could precede a larger routing engine change.
Alternatives to Certbot and Skipper
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Certbot or Skipper.
GitHub
GitHub adds Claude Opus 5.5 and GPT-6 models while shipping sandboxed agent execution
Parse Server
Parse Server patches three security CVEs: GraphQL disclosure and protectedFields bypass
werf
werf ships weekly across two tracks — v3 dev gets JSON Schemas and Harbor v2 fixes, v2 alpha gets the backports.
Buildkite
Buildkite ships Agent v4, an MCP server for AI-native CI, and a VS Code extension in a dense September push.
Jackett
Jackett's daily tracker churn adds 11 new APIs and formalizes its security policy in a week
See all Certbot alternatives → · See all Skipper alternatives →
Recent activity from Certbot and Skipper
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoSkipperv0.27.108
- 2d agoSkipperv0.27.107
- 2d agoSkipperv0.27.106
- 2d agoSkipperv0.27.105
- 2d agoSkipperv0.27.104
- 2d agoSkipperv0.27.103
- 22d agoCertbotCertbot 5.8.0
- 2mo agoCertbotCertbot 5.7.0
- 4mo agoCertbotCertbot 5.6.0
- 5mo agoCertbotCertbot 5.5.0
- 6mo agoCertbotCertbot 5.4.0
- 7mo agoCertbotCertbot 5.3.1
Frequently asked questions
What is the difference between Certbot and Skipper?
Both compete on the same themes — open-source — within Infra & APIs. Skipper is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Certbot better than Skipper?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Skipper is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Certbot?
Top Certbot alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Certbot alternatives" section above for the current picks, or visit /alternatives/certbot for the full list with editorial commentary on each.
What are the best alternatives to Skipper?
Top Skipper alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Skipper alternatives" section above for the current picks, or visit /alternatives/skipper for the full list with editorial commentary on each.