Wakapi
A critical auth bypass lands in the middle of Wakapi's slow identity rebuild.
Comparison · PM
Ever Teams vs Vikunja
A side-by-side editorial comparison of Ever Teams and Vikunja — release velocity, themes, recent moves, and the top alternatives to consider.
Ever Teams vs Vikunja: at a glance
What is Ever Teams?
Ever Teams shipped ten tags in twelve hours and one of them touched the product
The window is ten releases published between 01:06 and 12:54 on a single day, and nine of them are continuous-integration work: runners migrated to self-hosted ARC, dead ubicloud labels replaced, the DigitalOcean deploy gated behind a flag, actions bumped to Node 24, a desktop cache bounded after it grew to 9.5 GB. The one product change is v0.133.58, which drops four unread relations from the team-wide daily-plan fetch. Several tags carry no changelog at all beyond a compare link.
What is Vikunja?
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
Ever Teams vs Vikunja: editorial side-by-side
Ever Teams shipped ten tags in twelve hours and one of them touched the product
◆ Current state
The window is ten releases published between 01:06 and 12:54 on a single day, and nine of them are continuous-integration work: runners migrated to self-hosted ARC, dead ubicloud labels replaced, the DigitalOcean deploy gated behind a flag, actions bumped to Node 24, a desktop cache bounded after it grew to 9.5 GB. The one product change is v0.133.58, which drops four unread relations from the team-wide daily-plan fetch. Several tags carry no changelog at all beyond a compare link.
◆ Where it's heading
The release train is fully automated and fires on every merge, so tag count says nothing about progress here — the same CI changelog is restated verbatim across multiple tags minutes apart. What work is visible points at build infrastructure being rebuilt around self-hosted runners rather than at the application.
◆ Prediction
Until the runner migration settles, expect the tag stream to stay dominated by CI commits, with product changes appearing as occasional query-cost fixes like the daily-plan one.
Vikunja
0.0PM
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
◆ Current state
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
◆ Where it's heading
The arc moves from feature-completion (S3 storage, drag-and-drop project moves, hover previews in late 2025) toward platform credibility — closing security gaps a self-hosted task tool needs to clear before serious team adoption. The rapid version-number jump from v1.0.0-rc4 to v2.2.1 in two months suggests v1.0 shipped and the team tagged a v2 line aimed at addressing accumulated authz debt. Expect the next several releases to keep the security-first posture rather than return to a feature push.
◆ Prediction
The next release will likely continue closing remaining authz edges (more IDOR audits, additional credential-stripping in API responses) and bundle a translations and dependency sweep. A user-facing feature push probably waits until the security work plateaus.
Alternatives to Ever Teams and Vikunja
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Ever Teams or Vikunja.
Process Street
Process Street's public feed is an SEO content engine, not a changelog.
NocoBase
NocoBase runs two release lines at once while the v3 client rewrite absorbs the AI work
Hive
Hive ships in batches, and this one is all planning accuracy and admin control.
Plane
Plane ships a fortnightly digest, and the AI layer is where the real work is going.
Asana
Asana's agent left the app — it now answers work questions inside Slack threads.
See all Ever Teams alternatives → · See all Vikunja alternatives →
Recent activity from Ever Teams and Vikunja
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 22h agoEver TeamsVersion bump with an empty changelog
- 22h agoEver TeamsCI runners moved to self-hosted ARC and Node 24 actions
- 22h agoEver TeamsCI restatement of the self-hosted ARC runner migration
- 22h agoEver TeamsTeam-wide daily-plan fetch drops four unread relations
- 22h agoEver TeamsDesktop CI cache bounded after it stalled the build
- 1d agoEver TeamsVersion bump with an empty changelog
- 4mo agoVikunjav2.2.1: SSRF and IDOR patches plus disabled-account enforcement ⚡
- 6mo agoVikunjav1.0.0-rc4: drag-and-drop project moves, file-storage validation
- 8mo agoVikunjav1.0.0-rc3: S3 storage, comment counts, hover task previews
Frequently asked questions
What is the difference between Ever Teams and Vikunja?
They serve adjacent needs but don't currently overlap on shipped themes. Ever Teams is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Ever Teams better than Vikunja?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Ever Teams is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to Ever Teams?
Top Ever Teams alternatives in PM are ranked by recent ship velocity. Browse the "Ever Teams alternatives" section above for the current picks, or visit /alternatives/ever-teams for the full list with editorial commentary on each.
What are the best alternatives to Vikunja?
Top Vikunja alternatives in PM are ranked by recent ship velocity. Browse the "Vikunja alternatives" section above for the current picks, or visit /alternatives/vikunja for the full list with editorial commentary on each.