Rspamd
Rspamd is rebuilding its neural filter into a pluggable framework — and just fixed a controller that accepted any password.
Comparison · Comms
Dovecot vs Apprise
A side-by-side editorial comparison of Dovecot and Apprise — release velocity, themes, recent moves, and the top alternatives to consider.
Dovecot vs Apprise: at a glance
What is Dovecot?
Dovecot's 2.4 rewrite is still being paid for — twelve CVEs across two releases, two of them 2.4 regressions.
Dovecot 2.4 broke configuration compatibility outright in January 2025 and the line has been stabilizing ever since. The last two releases are dominated by security work: 2.4.3 shipped eight CVEs including SQL and LDAP injection when auth_username_chars is empty — both labelled v2.4 regressions — and 2.4.4 added four more, among them a fakeable CRAM channel binding and an incomplete earlier fix. Alongside that, 2.4.4 permanently drops root privileges in indexer-worker, quota-status and script-login before they serve requests.
What is Apprise?
Apprise passed 150 notification services and taught tags to carry priority.
Apprise is a Python notification library that normalizes delivery across services behind a single URL syntax, and it now supports more than 150 of them. Recent releases pair a steady intake of new services — Stackfield, PushWard, MailerSend, Kook, IRC, Fluxer, Viber Bot, a restored XMPP via Slixmpp — with structural work: HTML to Markdown conversion built in, weighted tag routing, and a documentation and URL Builder site at appriseit.com that several releases were explicitly staged to enable.
Dovecot vs Apprise: editorial side-by-side
Dovecot
0.0COMMS
Dovecot's 2.4 rewrite is still being paid for — twelve CVEs across two releases, two of them 2.4 regressions.
◆ Current state
Dovecot 2.4 broke configuration compatibility outright in January 2025 and the line has been stabilizing ever since. The last two releases are dominated by security work: 2.4.3 shipped eight CVEs including SQL and LDAP injection when auth_username_chars is empty — both labelled v2.4 regressions — and 2.4.4 added four more, among them a fakeable CRAM channel binding and an incomplete earlier fix. Alongside that, 2.4.4 permanently drops root privileges in indexer-worker, quota-status and script-login before they serve requests.
◆ Where it's heading
The 2.4 line is a rewrite absorbing its own cost. Dependencies are being replaced rather than pinned — libicu swapped for an in-house unicode library, libpcre2 brought in for regular expressions — and the process model is being tightened, with permanent privilege drops and a reworked service_reuse_port that pre-creates one socket per process. IMAP4rev2 and UTF-8 mail remain behind build flags and config toggles, so the modern-protocol work is real but deliberately unshipped.
◆ Prediction
Expect the CVE cadence to keep tracking the areas the rewrite touched — auth escaping, IMAP parsing limits and the variable expansion introduced in 2.4 — rather than long-settled code. The experimental IMAP4rev2 and mail_utf8 flags are the obvious candidates to graduate once the security churn slows, though nothing in these entries sets a date.
Apprise
0.0COMMS
Apprise passed 150 notification services and taught tags to carry priority.
◆ Current state
Apprise is a Python notification library that normalizes delivery across services behind a single URL syntax, and it now supports more than 150 of them. Recent releases pair a steady intake of new services — Stackfield, PushWard, MailerSend, Kook, IRC, Fluxer, Viber Bot, a restored XMPP via Slixmpp — with structural work: HTML to Markdown conversion built in, weighted tag routing, and a documentation and URL Builder site at appriseit.com that several releases were explicitly staged to enable.
◆ Where it's heading
Two lines are converging. Breadth is the obvious one and it compounds monthly, but the more interesting shift is from a fan-out library to one that makes routing decisions: tags now carry weights, and delivery attempts cascade by priority rather than firing at everything at once. The tooling investment — details() as JSON, plugin definition cleanup, the URL Builder — reads as an effort to make that growing service catalog navigable to people who won't read 150 sets of docs.
◆ Prediction
Expect the monthly cadence of bundled service additions to continue, and the weighted-routing model to accumulate configuration surface now that ordering is a first-class concept. The repeated groundwork commits suggest more of the documentation site's functionality is still being backfilled.
Alternatives to Dovecot and Apprise
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Dovecot or Apprise.
Element
Element's module system reaches v1.0 while the client keeps trimming its own chrome.
Twilio
Twilio is folding SendGrid into its own console and tightening the keys around everything else.
Telnyx
Telnyx pulls the whole agent stack onto its own platform — and cuts voice AI loose from the phone line
Salesmsg
Salesmsg keeps shipping AI agents that close the loop without a human touching the thread.
Signal Desktop
Three quiet betas in a row, after a run that handed group admins real control.
See all Dovecot alternatives → · See all Apprise alternatives →
Recent activity from Dovecot and Apprise
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1mo agoApprisePast 150 services, with HTML-to-Markdown conversion built in
- 2mo agoAppriseTags gain weights, turning notification fan-out into failover ⚡
- 2mo agoDovecotFour more CVEs, and root is dropped permanently
- 3mo agoDovecotEight CVEs, two of them 2.4 regressions
- 4mo agoAppriseXMPP multi-user chat and the groundwork for the URL Builder
- 5mo agoAppriseIRC support arrives and XMPP returns via Slixmpp
- 6mo agoAppriseBack to full test coverage; docs move to appriseit.com
- 8mo agoAppriseFour new services plus RPM and typing packaging fixes
- 9mo agoDovecotlibicu replaced in-house; IMAP4rev2 lands experimental
- 1y agoDovecotFirst 2.4 patch, carrying the new signing key
- 1y agoDovecotDovecot v2.4.0 ⚡
- 1y agoDovecotHeader limits imposed after CPU exhaustion CVEs
Frequently asked questions
What is the difference between Dovecot and Apprise?
They serve adjacent needs but don't currently overlap on shipped themes. Dovecot and Apprise are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Dovecot better than Apprise?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dovecot and Apprise are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
What are the best alternatives to Dovecot?
Top Dovecot alternatives in Comms are ranked by recent ship velocity. Browse the "Dovecot alternatives" section above for the current picks, or visit /alternatives/dovecot for the full list with editorial commentary on each.
What are the best alternatives to Apprise?
Top Apprise alternatives in Comms are ranked by recent ship velocity. Browse the "Apprise alternatives" section above for the current picks, or visit /alternatives/apprise for the full list with editorial commentary on each.