Twenty
Twenty 2.52 makes relation pickers respect role permissions, two days after the TipTap switch.
A side-by-side editorial comparison of Easy!Appointments and Twenty — release velocity, themes, recent moves, and the top alternatives to consider.
Easy!Appointments 1.6 lands video conferencing, GDPR tools, and a serious security overhaul across its CalDAV and booking stack.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
Twenty 2.51 swaps its rich text editor for TipTap, then spends a day fixing its own npm publishing.
Twenty 2.51.0 replaces BlockNote with TipTap for notes, tasks and rich text fields, requires a migration command after upgrading, deprecates the blocknote API sub-field and moves billing plans into an environment variable. Small CSV exports now download directly in the browser. The rest of the week's entries are SDK and npm publishing runs for 2.51.1 to 2.51.3, including a 2.51.2 tag that published nothing.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
The 1.6 release line is expanding Easy!Appointments from a simple booking page into a more complete scheduling platform: video conferencing links, richer calendar sync, GDPR compliance tooling, and hardened multi-provider access controls all move it closer to commercial alternatives. The security work in 1.6.1-beta.1 is as important as the features — self-hosted deployments that serve real customer data need these fixes before anyone should run 1.6 in production.
A stable 1.6.1 release is the next step, clearing the pre-release label once the security fixes are confirmed across the beta testing community. After that, the CalDAV and video conferencing integrations will likely expand — CalDAV push notifications or two-way Google Calendar sync are the natural follow-ons.
Twenty 2.51.0 replaces BlockNote with TipTap for notes, tasks and rich text fields, requires a migration command after upgrading, deprecates the blocknote API sub-field and moves billing plans into an environment variable. Small CSV exports now download directly in the browser. The rest of the week's entries are SDK and npm publishing runs for 2.51.1 to 2.51.3, including a 2.51.2 tag that published nothing.
Twenty is standardizing its building blocks: one editor across notes, emails and workflow forms, one CSV formatter across frontend and backend. The SDK packages for its app platform are now versioned with the core release, and the publishing pipeline is still being debugged.
Expect the blocknote API sub-field to be removed in a coming minor and more release-pipeline patches. App platform hooks like 2.50's useLocation() should keep arriving.
Other CRM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Easy!Appointments or Twenty.
Twenty 2.52 makes relation pickers respect role permissions, two days after the TipTap switch.
folk ships a French interface weeks after moving its data storage to Europe.
GroupOffice patches its current 26.0 line and the older 25.0 line on the same afternoon.
Close takes Chloe Chat out of beta for every customer, a month after OIDC SSO.
Corteza 2026.9.0 goes final after a week of single-fix candidates.
Django CRM spends a morning hardening itself against abusive input.
See all Easy!Appointments alternatives → · See all Twenty alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other CRM products to evaluate alongside.
Top Easy!Appointments alternatives in CRM are ranked by recent ship velocity. Browse the "Easy!Appointments alternatives" section above for the current picks, or visit /alternatives/easyappointments for the full list with editorial commentary on each.
Top Twenty alternatives in CRM are ranked by recent ship velocity. Browse the "Twenty alternatives" section above for the current picks, or visit /alternatives/twenty for the full list with editorial commentary on each.