project
Open-source customer support platform offering a shared team inbox across live chat, email, and messaging channels, deployable self-hosted or as SaaS.
Stave flagged 47 security findings in the documented AWS defaults of Mastodon, Discourse and Chatwoot, according to a dev.to post. None of the three configures bucket encryption, access logging or Public Access Block, so whoever creates the bucket has to add them.
Reality
A five-person team swapped eleven paid subscriptions for self-hosted open source and came out close to level, because the cost that mattered was the maintainer's own hours.
Reality
Compose has carried a restart flag on depends_on since 2023. A read-only pass over 38 running containers on eight servers found seven declared dependencies, all of them waiting on health and all of them recording restart as false.
Reality
An operator's log of four rotations across two self-hosted n8n instances puts every failure in a consumer copy, a derived URL token, or a hardcoded header, and none of the three tripped an alert.
Reality
One operator's 89,479-message month prices out at $604.29 on Twilio. Only 29,602 of those messages were billable, and finding that number takes a window function, not a multiplication.
Reality
A Chatwoot operator's postmortem shows the meter you inherit watches Postgres while attachments pile up on a Docker volume that grows with tenant count, not traffic.
Reality