caddy:2 vs nginx:1.30-alpine

The short answer

• nginx:1.30-alpine is 3.2 MB smaller unpacked on amd64 (64 MB vs 67 MB, 5% less).
• As a download, caddy:2 is 25 MB compressed against 26 MB for nginx:1.30-alpine: 1.0× less to pull.
• nginx:1.30-alpine has fewer known vulnerabilities: 49 (3 critical or high) against 76 (10 critical or high) in caddy:2.
• 72 of caddy:2's 76 findings have a fixed version available upstream.
• 49 of nginx:1.30-alpine's 49 findings have a fixed version available upstream.
• Base OS: caddy:2 is built on Alpine Linux 3.23.7; nginx:1.30-alpine on Alpine Linux 3.24.3.
• Alpine images use musl libc instead of glibc. Most software runs unchanged; prebuilt binaries linked against glibc (some Python wheels, Node native modules, vendor agents) may not.
• Packages detected: 181 in caddy:2, 71 in nginx:1.30-alpine.
• Filesystem layers: 5 vs 8.
• Platforms: only nginx:1.30-alpine ships i386.