Truepost is built on open source, the same way Security Architects and eRacks Systems work - we use it, and we say where it came from. This page lists the projects and open data Truepost runs on, what each one does for you, and its license.
When you sign in with a password, Truepost finds your mail server the way Thunderbird does: well-known providers first, then your domain's own DNS records, then Mozilla's ISPDB - the open database of mail settings behind Thunderbird's setup wizard. Only your domain is looked up, never your address or your password.
| Project | Used for | License |
|---|---|---|
| Mozilla ISPDB | finding your mail server when you sign in with a password | MPL-2.0 |
| MaxMind GeoLite2 | the network and country a message really came from | GeoLite2 End User License Agreement |
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
| Project | Used for | License |
|---|---|---|
| FastAPI | the web API | MIT |
| Starlette | web framework core | BSD-3-Clause |
| Uvicorn | web server | BSD-3-Clause |
| AnyIO | worker threads behind the API | MIT |
| IMAPClient | reading and filing mail over IMAP | BSD-3-Clause |
| dnspython | DNS lookups for mail server discovery | ISC |
| HTTPX | HTTP requests | BSD-3-Clause |
| Requests | HTTP requests | Apache-2.0 |
| Beautiful Soup | readable text and links from HTML-only mail | MIT |
| GeoIP2 / MaxMind DB reader | reading the GeoLite2 data | Apache-2.0 |
| pywebpush | login-code alerts to your phone with Truepost closed | MPL-2.0 |
| cryptography | keys and signing for those alerts | Apache-2.0 or BSD-3-Clause |
| google-auth | Gmail sign-in | Apache-2.0 |
| GnuPG | opening PGP-encrypted mail and checking signatures | GPL-3.0-or-later (run as a separate program) |
Spam flags also read the verdicts your own mail server adds, such as Apache SpamAssassin's (Apache-2.0). Truepost reads those headers; it does not include SpamAssassin.
| Project | Used for | License |
|---|---|---|
| Flet | the original Truepost app | Apache-2.0 |
| Playwright | browser tests | Apache-2.0 |
| pytest | tests | MIT |