Superhuman
Superhuman rebuilt its mobile apps and wired every inbox into AI assistants — the email client is becoming a suite.
A side-by-side editorial comparison of Element and Roundcube — release velocity, themes, recent moves, and the top alternatives to consider.
Element rebuilds its timeline with MVVM architecture while cutting legacy OS support in v1.12.28.
Element, the open-source Matrix messaging client, ships on a stable two-week release cadence and is currently at v1.12.28. The project is mid-way through a multi-part Timeline MVVM refactor (parts 1 and 2 in v1.12.26 and v1.12.27), restructuring the core room timeline component. The v1.12.28 release raises the minimum glibc requirement to 2.34, ending support for Debian bullseye and Ubuntu releases older than 22.04.
Roundcube patches 28+ vulnerabilities across two branches in a five-month hardening sprint
Roundcube has shipped six security releases across its main 1.7.x and LTS 1.6.x branches since June, patching a cumulative 28+ vulnerabilities including an RCE via the markasjunk plugin's cmd_learn driver, IMAP command injection through LITERAL+ byte-count desynchronization, multiple SSRF bypasses, cross-user contact group access, and zero-click stored XSS. The simultaneous dual-branch cadence shows active maintenance of both lines.
Element, the open-source Matrix messaging client, ships on a stable two-week release cadence and is currently at v1.12.28. The project is mid-way through a multi-part Timeline MVVM refactor (parts 1 and 2 in v1.12.26 and v1.12.27), restructuring the core room timeline component. The v1.12.28 release raises the minimum glibc requirement to 2.34, ending support for Debian bullseye and Ubuntu releases older than 22.04.
The Timeline MVVM series is the defining architectural investment of this window — replacing the legacy timeline rendering with a proper view-model separation. This is foundational work that typically precedes faster feature delivery on the timeline surface (thread UX, call integration, richer message types). Parallel work promoting Custom Themes to devtools and updating bundle configurations signals cleanup of the extension and theming surface alongside the core refactor.
A Timeline MVVM part 3 or final integration is the immediate next step; once complete, expect improved thread UX or voice/video call timeline integration as the first beneficiaries of the new architecture.
Roundcube has shipped six security releases across its main 1.7.x and LTS 1.6.x branches since June, patching a cumulative 28+ vulnerabilities including an RCE via the markasjunk plugin's cmd_learn driver, IMAP command injection through LITERAL+ byte-count desynchronization, multiple SSRF bypasses, cross-user contact group access, and zero-click stored XSS. The simultaneous dual-branch cadence shows active maintenance of both lines.
The volume and variety of external security reports — from Horizon3.ai, Samsung R&D, pwn.ai, and independent researchers — indicates Roundcube's attack surface is under sustained scrutiny. The 1.7.0 release in May introduced meaningful features (Markdown rendering, improved OAuth2/OIDC, mandatory public_html entry point), but the months since have been consumed by patching. Feature development on 1.7.x appears paused until the security debt settles.
Another paired security release across 1.7.x and 1.6.x is likely within 6-8 weeks given the cadence. The SSRF and CSS parsing issues have required multiple iterations to close fully, suggesting the hardening work isn't finished.
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Element or Roundcube.
Superhuman rebuilt its mobile apps and wired every inbox into AI assistants — the email client is becoming a suite.
Chatwoot is building an AI-first support platform, with Captain gaining audience targeting and macro automation reaching the keyboard-native workflow.
Signal adds granular notification controls: badge content, muted threads, restore defaults
Zoho Cliq 7.0 bets on AI conversation summaries and Neat hardware to close the gap with enterprise messaging platforms
Krisp adds deepfake detection and expands Voice Translation as its Call Center AI platform deepens enterprise compliance tools.
Netcore's recent entries are blog content, not product releases — the signal is a BFSI and ecommerce vertical sales push.
See all Element alternatives → · See all Roundcube alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — open-source — within Comms. Element and Roundcube are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Element and Roundcube are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
Top Element alternatives in Comms are ranked by recent ship velocity. Browse the "Element alternatives" section above for the current picks, or visit /alternatives/element-web for the full list with editorial commentary on each.
Top Roundcube alternatives in Comms are ranked by recent ship velocity. Browse the "Roundcube alternatives" section above for the current picks, or visit /alternatives/roundcube for the full list with editorial commentary on each.