LoginSign Up
← Back to all sparks
E

Ever Gauzy

HR
Velocity10.0

Open-source ERP, CRM and people management platform

gauzy.co ↗

Ever Gauzy patches GHSA-4rwq GitHub ownership verification flaw and reaches 97/97 green unit tests

hr-managementproject-managementopen-sourcetime-trackingemployee-trackingsecurity
◆Current state
Ever Gauzy is an open-source HRM and project management platform with an exceptionally high release cadence — often 10+ releases per day, each covering a single change. The current window is dominated by infrastructure hardening: a security fix for GitHub installation ownership verification (GHSA-4rwq), Sentry quota reduction (health probes and non-error events excluded), a complete Angular unit test harness rewrite that now passes 97/97 projects, and CI pipeline optimizations.
◆Where it's heading
Ever Gauzy is in a reliability and observability hardening phase before the next visible feature push. The unit test work (97/97 projects green with a hermetic environment) is foundational — without it, the project's velocity becomes a liability rather than an asset. The contacts page polish and invoice UI fixes are accumulated UX debt being cleared. Security response time on GHSA-4rwq was fast (same-day from develop to stage).
◆Prediction
The next meaningful feature release is likely a new module or integration — the contacts and invoice UI work suggests a CRM-adjacent capability is being stabilized. The test coverage foundation now in place should let the team accelerate feature shipping without regressions.

◆Recent moves

  1. 15h ago

    v111.44.70

    A single UI fix for the documents actions column display. Part of the ongoing UI stabilization work in the current window.

    View source ↗
  2. 17h ago

    v111.44.69

    A CSpell dictionary update — no runtime or UI changes. Standard maintenance on a project with a large and evolving codebase vocabulary.

    View source ↗
  3. 18h ago

    Unit test harness reaches 97/97 projects green with hermetic environment

    The Angular unit test infrastructure is rebuilt: hermetic test environments, Angular jest harness fixes, stub specs, and CJS/d3 interop. The result is 97/97 projects passing — previously flaky or skipped tests are now reliable. On a codebase shipping this frequently, green CI is a meaningful quality gate.

    View source ↗
  4. 1d ago

    GHSA-4rwq GitHub ownership fix, Sentry quota fix, and contacts page polish

    A bundled stage release covering: a security fix for GHSA-4rwq (GitHub installation ownership verification before binding), Sentry quota reduction (health probes excluded, non-errors filtered), contacts page UI improvements, and invoice action visibility fix. The security patch was fast-tracked from develop to stage on the same day.

    View source ↗
  5. 1d ago

    v111.44.66

    CI cleanup: stopped uploading Docker build records and summaries. An internal pipeline optimization with no user-visible effect.

    View source ↗
  6. 1d ago

    Security fix for GHSA-4rwq: GitHub installation ownership verified before binding

    Addresses GHSA-4rwq by adding ownership verification for GitHub installations before the integration is bound to an account. Same-day response from identification to stage deployment, indicating the team treats security advisories as top priority.

    View source ↗