remark42
A privacy-focused comment system you embed in blogs and articles instead of Disqus, with social login, moderation and no external database.
remark42 at a glance
What is remark42?
Remark42 adds a comment section to any web page through an embedded widget served from your own instance. Readers sign in with Google, GitHub, Apple, Telegram, Discord and other OAuth providers, by email, or anonymously if you allow it. Threads can be nested or flat, comments support Markdown and image uploads, and readers can vote. Moderators delete comments, block users, pin and verify. Admins hear about new comments through Telegram, Slack, webhooks or email, and readers can be told about replies. Everything is kept in one embedded data file, with JSON export and automatic backups. Old comments can be imported from Disqus and WordPress; one instance can serve several sites.
Good fit if
- You run a static or self-built blog and want comments without third-party tracking or ads.
- You are leaving Disqus or WordPress comments and want to bring the old threads along.
- You host several sites and want one comment backend for all of them.
Before you adopt it
Remark42 is under the MIT license, with no paid parts in the repository. Development is active: 14 authors made 114 commits in the last 90 days, and one of them accounts for about two thirds. The interface is available in 23 languages. Deployment is a single Docker container or a self-contained binary for Linux, macOS or Windows, and because data sits in an embedded file, there is no separate database server to run.
Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction
How to run remark42 yourself
One-click install
Not listed in the app catalogs of Umbrel, YunoHost, TrueNAS, Unraid, CasaOS, Runtipi, Proxmox VE Helper-Scripts and Coolify.
Ways to install
- Docker files
- Dockerfile or compose file in the repository
- Docker image
- umputun/remark42: 2.6M pulls · x86-64, ARM64 · 34 MB downloadAlso ghcr.io/umputun/remark42
- Compose file
- docker-compose.yml: 1 service
- Setup effort
- 1 of 5, judged from the compose file
- Kubernetes
- No Helm chart in the repository
- Packages
- Nix and FreeBSD versions on Repology
- Desktop and mobile
- Builds for Linux, macOS, Windows, including ARM in GitHub releases
- Interface languages
- 23 languages, including English, German, French, Spanish, Dutch, Polish, Russian, Turkish, Japanese and Korean
Show all 23
Arabic, Bulgarian, Chinese, Czech, Dutch, English, Finnish, French, German, Hebrew, Hungarian, Japanese, Korean, Macedonian, Persian, Polish, Romanian, Russian, Spanish, Swedish, Thai, Turkish, Vietnamese
Install instructions: remark42.com or the README on GitHub. Docker images and packages are checked weekly.
remark42 health: is it still maintained?
81 of 100, actively developed
Read from GitHub on 12 November 2026. How the score works
remark42 security
Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.
Latest advisories
- HTML phishing injection via comment reply text in email notifications (text/template instead of html/template)
- Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deploymentNo fixed version listed
- IPv6 address truncation and image proxy SSRF error leakage
What each Scorecard check found
- Binary files10 / 10No compiled binaries checked into the repository
- License file10 / 10A license file is present
- Maintained10 / 10Steady commits and issue activity in the last 90 days
- Packaging10 / 10Releases are published as packages from CI
- Security policy10 / 10Explains how to report a vulnerability
- Code review8 / 10Some changes are merged without review
- Branch protection6 / 10Rules on the main branch are partly enforced
- Best-practices badge0 / 10No OpenSSF Best Practices badge
- Dangerous workflows0 / 10GitHub Actions workflows have risky patterns
- Fuzzing0 / 10No fuzz testing found
- Pinned dependencies0 / 10Dependencies are not pinned to fixed versions
- Signed releases0 / 10Releases are not signed
- Static analysis0 / 10No static analysis found
- Token permissions0 / 10CI tokens have broad write rights
Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 9 November 2026; checks that do not apply to remark42 are left out.
remark42 license: is it open source?
remark42 uses MIT, an open-source license approved by the OSI.
- December 2017First published on GitHub.
- TodayMIT.
remark42 for developers
Written in
- Go 69%
- TypeScript 24%
- CSS 3%
- JavaScript 2%
- HTML 1%
- Other 2%
Getting involved
Language shares are GitHub’s count of the code in the repository.
Alternatives to remark42
- Issoa Disqus alternative 52 health · MIT · 5.3k stars
- RedlibPrivate front-end for Reddit 50 health · AGPL-3.0 · 4k stars
- MastodonYour self-hosted, globally interconnected microblogging community 88 health · AGPL-3.0 · 50.6k stars
- MisskeyA completely free and open interplanetary-microblogging platform 81 health · AGPL-3.0 · 11.4k stars
- HumHubHumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with… 81 health · AGPL-3.0 · 6.8k stars
Questions about remark42
Is remark42 open source?
Yes. remark42 is published under MIT, an OSI-approved open-source license.
Is remark42 still maintained?
Its health score is 81 of 100 (actively developed). It had 127 commits in the last 90 days, the latest on 12 November 2026, and its latest release came out on 11 October 2026.
How do I run remark42?
You can run it with the Docker image umputun/remark42 and as an app for Linux, macOS, Windows, including ARM. The README on GitHub has the exact steps.
What is remark42 written in?
remark42 is written mainly in Go (69% of the code), with TypeScript (24%), by GitHub’s count of the repository.
What languages is remark42 available in?
The repository has interface translations for 23 languages, including English, German, French, Spanish, Dutch, Polish, Russian and Turkish.
What are the alternatives to remark42?
Close alternatives in the Social networks & forums category include Isso, Redlib, Mastodon.