CRM

Twenty

A modern CRM, mostly AGPL, with enterprise files marked in the source.

Partial score

WebsiteCodeDeploy

7/19 signals

Why this score

Not enough measured signals for Owner-safe, and the score is outside the Needs-a-techie band. Captured 2026-10-15. Unmeasured signals add nothing and are not treated as failures.

Alive14/20
  • Last push. 8 points. GitHub pushed_at was 0 days before 2026-10-15.
  • Releases in 12 months. 6 points. The public releases feed shows at least 10 tagged releases in the last 12 months.
  • How fast issues close. Not measured. Median issue-close time is not in the seed snapshot, so this signal is omitted.
Trusted2/20
  • OpenSSF Scorecard. Not measured. No Scorecard result in the snapshot.
  • Open critical or high vulnerabilities. Not measured. Open vulnerability counts were not fetched. We do not assume zero.
  • Contributors in 90 days. Not measured. 90-day contributor counts were not fetched.
  • Bus factor. Not measured. Contributor share was not fetched.
  • Stars. 2 points. 58,363 stars, log-scaled and capped at 20,000.
Takeoverable9.8/25
  • Licence. 6 points. Licence class network copyleft.
  • Stack. 3.8 points. TypeScript. TypeScript, JavaScript, Python, Go, PHP, and Vue score as widely hireable.
  • Tests and CI. Not measured. We did not confirm a test suite. Missing CI at the usual paths is treated as unknown, not as a failure.
  • Docs quality. Not measured. Docs quality is an LLM rubric. v1 does not invent that score.
  • Data export. Not measured. Data-export was not audited app by app, so it is omitted.
Easy to run5/20
  • One-click deploy. Not measured. No one-click host was verified for this app, so the signal is omitted rather than scored as a failure.
  • Managed cloud or done-for-you. 5 points. SeatLess offers done-for-you setup. A vendor cloud, where listed, is the vendor’s own hosting, not a licence you own.
  • Docker Compose. Not measured. No Dockerfile or Compose file at the usual paths. It may still exist elsewhere, so this is omitted.
  • Memory needs. Not measured. Memory needs were not measured.
  • Setup steps. Not measured. Setup-step rubric was not run.
Feature fit12/15
  • Coverage of the incumbent’s main jobs. 12 points. Editorial reading of public docs. Not a certified feature audit. Unknown jobs are left out of the average.

What it replaces

Twenty is a contact and pipeline CRM aimed at people who find Salesforce heavy. The licence file says the project is mostly AGPL-3.0, with files marked @license Enterprise on a commercial licence, and some packages on MIT.

Feature coverage vs Pipedrive

Editorial, from public descriptions. A dash means we did not assess that job. This is not a lab test, and Pipedrive has not reviewed it.

JobTwenty
Contacts and companies✓
Deal pipeline✓
Activities and tasks✓
Email on the record◐
Pipeline reports◐

Licence, in plain language

AGPL-3.0 Network copyleft

You can use, change, and run it. If you offer the software as a service, you share the changes you make. That is the usual Affero GPL bargain.

Mostly AGPL-3.0. Enterprise-marked files are commercial. Some packages are MIT.

Repository health

Stars58,363
Forks9,535
Open issues137
Last push2026-10-14
Last tagged release2026-10-14
Releases in 12 months10 or more
OpenSSF ScorecardNot in the snapshot
LanguageTypeScript
ArchivedNo

Similar in CRM

Suggest an edit