compare
Inbucket vs Mailpit
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Inbucket | Mailpit |
|---|---|---|
| Language | Go | Go |
| Licence | MIT | MIT |
| Stars | 2.3k | 11k |
| Latest | v3.1.1 | v1.31.4 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 269 days between releases | about 11 days between releases |
| Active contributors | 2 commit authors on the default branch in the last 90 days | 4 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Mailtrap. Alternatives to Mailtrap →
PartialInbucketThe email sandbox only, with a web inbox, POP3 and a REST API; no sending service.
PartialMailpitThe email sandbox only, with SMTP capture, a web inbox, HTML checks and an API; no sending service.
Inbucket
- v3.1.12025-12-06Go version update for CVE-2025-47907
- v3.1.02025-07-27Note in logs that a missing Lua script is not an error (#575)
- v3.1.0-beta32024-11-02Lua scripting additions:
- v3.1.0-beta22024-02-05Reject mail by origin domain: INBUCKET_SMTP_REJECTORIGINDOMAINS (#375)
- v3.1.0-beta12023-02-28Monitor tab updates when messages are deleted (#337)
Mailpit
- v1.31.42026-10-03Prevent duplicate messages from being added in websocket handlers (#737)
- v1.31.32026-09-27Limit maximum MIME parts parsed per message to 500
- v1.31.22026-09-19A vulnerability was fixed which allowed animated image attachments (APNG, GIF, WebP) to bypass the thumbnail pixel budg…
- v1.31.12026-09-05This release adds an optional feature to mitigate DNS rebinding attacks (read more), as well as other hardening fixes.
- v1.31.02026-08-22Add deep dark theme (#728)
Inbucket
✓ signed The latest release, v3.1.1, carries a signature GitHub verified.
Loading the security report
Mailpit
unsigned The latest release, v1.31.4, carries no signature GitHub could verify.
Loading the security report