Folk
folk packages its recent releases as a field-sales toolkit.
A side-by-side editorial comparison of Django CRM and Easy!Appointments — release velocity, themes, recent moves, and the top alternatives to consider.
Django CRM spends a morning hardening itself against abusive input.
Django CRM is an open-source CRM whose first three tracked releases all landed on October 15. Each adds a guardrail: an upload size limit, a 200-ID cap on bulk update and delete, and RE2 for regex routing conditions to block catastrophic backtracking. None changes what users can do; all limit how the app can be overloaded.
Easy!Appointments 1.6 lands video conferencing, GDPR tools, and a serious security overhaul across its CalDAV and booking stack.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
Django CRM is an open-source CRM whose first three tracked releases all landed on October 15. Each adds a guardrail: an upload size limit, a 200-ID cap on bulk update and delete, and RE2 for regex routing conditions to block catastrophic backtracking. None changes what users can do; all limit how the app can be overloaded.
The work points at resource exhaustion from inputs: large files, oversized bulk requests and pathological regexes. Three releases in under five hours from one contributor reads as a deliberate hardening pass rather than routine upkeep.
More limits on remaining input paths are the most likely next releases. With only three entries, all from one day, the feature roadmap is not visible.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
The 1.6 release line is expanding Easy!Appointments from a simple booking page into a more complete scheduling platform: video conferencing links, richer calendar sync, GDPR compliance tooling, and hardened multi-provider access controls all move it closer to commercial alternatives. The security work in 1.6.1-beta.1 is as important as the features — self-hosted deployments that serve real customer data need these fixes before anyone should run 1.6 in production.
A stable 1.6.1 release is the next step, clearing the pre-release label once the security fixes are confirmed across the beta testing community. After that, the CalDAV and video conferencing integrations will likely expand — CalDAV push notifications or two-way Google Calendar sync are the natural follow-ons.
Other CRM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Django CRM or Easy!Appointments.
folk packages its recent releases as a field-sales toolkit.
GroupOffice ships three 26.0 builds in four days, all with install-only notes.
Corteza opens a 2026.9 release line after two years on 2024.9 patches.
Twenty is rewriting its API errors for the AI agents calling it, not just for people.
Twenty is tuning its CRM API for AI agents, one error message at a time.
Close adds OIDC single sign-on as voice agents and Chloe take on more of the CRM.
See all Django CRM alternatives → · See all Easy!Appointments alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — open-source — within CRM. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other CRM products to evaluate alongside.
Top Django CRM alternatives in CRM are ranked by recent ship velocity. Browse the "Django CRM alternatives" section above for the current picks, or visit /alternatives/django-crm for the full list with editorial commentary on each.
Top Easy!Appointments alternatives in CRM are ranked by recent ship velocity. Browse the "Easy!Appointments alternatives" section above for the current picks, or visit /alternatives/easyappointments for the full list with editorial commentary on each.