Ever Gauzy vs Leapsome

Ever Gauzy is in a maintenance stretch after the React UI and Documents work of earlier this month. The window is ten patch releases in four days, dominated by CI reorganization — composite actions replacing 66 duplicated registry blocks, Linux VM runners, an e2e suite that had been reinstalling 9 GB of node_modules per job — plus a security round that stopped TypeORM silently dropping null and undefined where predicates and closed an id-less JWT bypass. Real product fixes are in there too: the Documents API had been returning 200 with an error body on every relations request.

The team ships fixes continuously under a single maintainer's name, and the recent pattern is that a feature burst is followed by a week of paying down what it broke. Documents and the React port are both in that settling phase now. The CI work is unglamorous but points at a release process that had become the bottleneck.

Expect the patch cadence to continue until the React port resumes, with further Angular dashboards moving behind the Preferred-UI switch one module at a time. The security review is explicitly labelled round one, so more findings from the same pass are likely.