Why this score
Not enough measured signals for Owner-safe, and the score is outside the Needs-a-techie band. Captured 2026-10-15. Unmeasured signals add nothing and are not treated as failures.
Alive14/20
- Last push. 8 points. GitHub pushed_at was 0 days before 2026-10-15.
- Releases in 12 months. 6 points. The public releases feed shows at least 10 tagged releases in the last 12 months.
- How fast issues close. Not measured. Median issue-close time is not in the seed snapshot, so this signal is omitted.
Trusted4.8/20
- OpenSSF Scorecard. 3.2 points. OpenSSF Scorecard 4.6 out of 10.
- Open critical or high vulnerabilities. Not measured. Open vulnerability counts were not fetched. We do not assume zero.
- Contributors in 90 days. Not measured. 90-day contributor counts were not fetched.
- Bus factor. Not measured. Contributor share was not fetched.
- Stars. 1.6 points. 3,489 stars, log-scaled and capped at 20,000.
Takeoverable11.7/25
- Licence. 6 points. Licence class network copyleft.
- Stack. 3.8 points. PHP. TypeScript, JavaScript, Python, Go, PHP, and Vue score as widely hireable.
- Tests and CI. 1.9 points. A CI workflow file was found. A test suite was not separately confirmed, so this signal scores half.
- Docs quality. Not measured. Docs quality is an LLM rubric. v1 does not invent that score.
- Data export. Not measured. Data-export was not audited app by app, so it is omitted.
Easy to run5/20
- One-click deploy. Not measured. No one-click host was verified for this app, so the signal is omitted rather than scored as a failure.
- Managed cloud or done-for-you. 5 points. SeatLess offers done-for-you setup. A vendor cloud, where listed, is the vendor’s own hosting, not a licence you own.
- Docker Compose. Not measured. No Dockerfile or Compose file at the usual paths. It may still exist elsewhere, so this is omitted.
- Memory needs. Not measured. Memory needs were not measured.
- Setup steps. Not measured. Setup-step rubric was not run.
Feature fit15/15
- Coverage of the incumbent’s main jobs. 15 points. Editorial reading of public docs. Not a certified feature audit. Unknown jobs are left out of the average.
What it replaces
EspoCRM covers accounts, contacts, leads, and a pipeline, and it is built to be customised. The repository is AGPL-3.0. It looks more like classic CRM software than Twenty does, which some teams prefer.
Feature coverage vs Pipedrive
Editorial, from public descriptions. A dash means we did not assess that job. This is not a lab test, and Pipedrive has not reviewed it.
Licence, in plain language
AGPL-3.0 Network copyleft
You can use, change, and run it. If you offer the software as a service, you share the changes you make. That is the usual Affero GPL bargain.
AGPL-3.0.
Suggest an edit