mrkeyoor.com_
Fri 16 Oct 18:54 UTC
Dev Toolsevaluationupdated 16 Oct 2026

super-productivity review

Super Productivity combines a personal task list with a daily schedule and time tracking. It imports work from issue trackers such as Jira and GitHub so you can plan assigned tasks beside calendar events and export work summaries.

+145stars / 7d
Verdict

Our Super Productivity run built successfully in 317 seconds, but the full test command failed and npm audit reported 39 known vulnerabilities. Choose the packaged desktop app when issue imports, personal scheduling, and task-based time tracking solve a daily problem for you. Source contributors need to resolve the failed command and assess the advisories, while sync users should verify backup recovery before trusting it with billable hours.

We ran it

Lab card: what happened when we ran super-productivityScreenshot of super-productivity (super-productivity.com?ref=github)
Install✓ · 40s1528 packages · 952 MB
Build✓ · 317s
Tests✗ · 86s278 passed · 0 failed of 278 (vitest)
Known vulns392 critical · 23 high · 14 moderate · 0 low (npm audit)
Repo5508 files~936,985 lines of source · 62.7 MB · 34 CI workflows · Dockerfile

Answers from our run

Does super-productivity build from source?

Dependencies installed in 40 seconds (1528 packages), and the build succeeded in 317 seconds. We cloned commit 13d6f7f into a clean Debian container with 3 CPUs and no project-specific setup.

Do super-productivity's tests pass?

Yes: 278 of 278 passed when we ran the project's own test command (vitest). Some failures need services or credentials a bare container does not have.

Does super-productivity have known vulnerabilities in its dependencies?

npm audit flagged 39 known advisories in the dependency tree, including 2 critical at the time of our run.

Who should not use super-productivity?

Browser-only users who need dependable background timers and automatic backups to disk: the platform reference documents restrictions on both.

What are the alternatives to super-productivity?

Vikunja, Tasks.org, ActivityWatch. Our Super Productivity run built successfully in 317 seconds, but the full test command failed and npm audit reported 39 known vulnerabilities.

Setup3/540-second source install; sync adds services and configuration
Docs4/5Useful platform comparisons, development steps, and sync caveats
Community5/5October 16 push and active issue and pull-request discussion
Maturity3/5Working build, failed full test command, and beta sync service

Discussed on

  1. hn30 days of super productivity31 points
  2. hnSuper Productivity is a todo list app with Timeboxing and time tracking28 points
  3. hnThe 1-Step Plan for Super-Productivity6 points
  4. hnSuper Productivity is insanely feature-rich for an open-source app5 points
  5. hnSuper Productivity: Focus tools in one open-source app, offline and private3 points

Who it’s for

Developers whose work arrives in Jira, GitHub, or GitLab and who want a separate personal schedule.
Freelancers who want task notes and tracked time in the same desktop app.
People who want local use without creating an account, with optional sync across devices.

Who it’s NOT for

Browser-only users who need dependable background timers and automatic backups to disk: the platform reference documents restrictions on both.
Teams that cannot accept beta sync infrastructure: the SuperSync guide labels the service beta and limits support for self-hosting.
Anyone who treats third-party plugins as isolated extensions: the docs warn that isolation is weak and Node execution can grant full machine access.
Developers automating recurring-task project moves through the local REST API without checking issue 10675 and its fix: the report says the repeat configuration stays behind.

Setup reality

Our sandbox installed commit 13d6f7f in 40 seconds, adding 1,528 packages and using 952 MB. The build passed in 317 seconds. Tests failed with exit 1 after 86 seconds, although Vitest reported 278 passed and 0 failed. The log tail shows passing release-note checks without the failure cause. Npm audit reported 39 known vulnerabilities, including 2 critical and 23 high.

Local use needs no account. Issue imports need access to the chosen service, and cross-device sync needs a configured provider. Self-hosted SuperSync adds PostgreSQL, Caddy, a public domain, and SMTP for account emails. Its guide labels it beta with limited self-hosting support.

The development guide requires Node and Git, environment-file generation, and separate frontend and Electron processes for the full app. Browser timers, calendar requests, and filesystem backups have documented restrictions. Packaged clients avoid the source-development workflow, but our lab did not measure their installation.

Your issue tracker can feed a personal working day

Import a GitHub issue, put it beside a calendar event, and track the time you actually spend on it. That's the reason to choose Super Productivity. Its README describes task imports from services including Jira and GitLab, a schedule timeline, and exportable work summaries. The appeal is keeping your personal plan beside the work assigned elsewhere, without making your employer replace its tracker.

The source checkout occupied 62.7 MB in our sandbox, before the working environment grew to 952 MB. This is a substantial application to maintain yourself. For everyday use, the project offers downloadable apps and a hosted web app instead. Start there unless you intend to change the code. Projects, subtasks, notes, and focus sessions already give an individual plenty to organize before adding plugins.

What happened when we ran it

Our run installed Super Productivity commit 13d6f7f in 40 seconds and built it in 317 seconds on October 15, 2026. The fresh Debian sandbox had 3 CPUs, 8 GB of RAM, Node 22, no secrets, and no elevated privileges. Installation added 1,528 packages and occupied 952 MB. These are development-environment measurements, not timings for downloading a desktop app or opening your daily task list.

The test command failed with exit code 1 after 86 seconds, despite Vitest reporting 278 passed and 0 failed out of 278. The supplied log tail contains passing release-note checks, including duplicate filtering, commit-range handling, and AI-provider environment parsing. It does not show the error responsible for the command's failure. Calling the complete suite green would be wrong. Assigning a cause from that tail would be guessing.

Npm audit reported 39 known vulnerabilities: 2 critical, 23 high, and 14 moderate. That is enough to require dependency review before adopting the source tree inside an organization. The supplied results do not identify affected packages or show whether an advisory is reachable in the shipped application. They establish an audit finding, not a demonstrated compromise of a user's tasks.

The desktop app avoids documented browser restrictions

The web-versus-desktop reference says browser time tracking works only while the app is open. Idle detection requires the Chrome extension, and background tab throttling can affect timers. Automatic backups to the filesystem are unavailable in the browser. Anyone using tracked hours for client invoices should read those restrictions before making the hosted tab their permanent workspace. Desktop is the more convincing fit for that job.

Our sandbox's 317-second build says nothing about timer accuracy on a laptop or phone. Platform behavior needs separate checks. The same reference describes CORS restrictions affecting browser calendar and sync requests, while native clients use a different HTTP path. A successful calendar connection on desktop therefore doesn't establish browser compatibility. Use the client that supports the integration you depend on, rather than assuming every download provides identical behavior.

Optional sync brings a server and recovery decisions

Super Productivity requires no account for local use, according to its README. Cross-device work adds a choice of SuperSync, Dropbox, or WebDAV. The SuperSync server guide labels that service beta and says self-hosting support is limited. Its bundled deployment uses PostgreSQL and Caddy, a public domain, and working SMTP for verification and recovery links. That's meaningful administration for synchronizing a personal task list.

The 952 MB environment we measured covers the repository path, not proof of a working sync deployment. Release v19.2.0 explicitly lists fixes for sync behavior that could lose tracked time or overwrite concurrent task edits. It also fixes desktop backups being recorded as successful when they failed. Those changes are welcome, but they make a backup-and-restore check a sensible condition of adoption, especially if tracked hours matter financially.

Plugins deserve the same trust as application code

The official platform reference warns that plugins are not strongly isolated from the host application. Desktop plugins can request Node execution, and granting it permits full machine access. That rules out casually installing an unfamiliar plugin because its description sounds useful. Keep the initial setup small. If your workplace restricts downloaded extensions, review Super Productivity's plugin permissions against that policy before connecting company issue trackers.

Our scan found 34 CI workflow files and a workspace monorepo across 5,508 files. That suggests a broad maintenance surface, not a safety guarantee for extensions. The development guide documents environment-file generation and separate frontend and Electron processes. Its instructions are useful for contributors, but ordinary users have little reason to inherit that workflow. A packaged desktop client is the practical starting point for evaluating whether the schedule improves your day.

October maintenance is active, with recurring-task defects still reported

The repository's last push was October 16, 2026, and GitHub listed 22,874 stars and 1,457 open issues and PRs. Release v19.2.0 shipped October 11. Recent activity includes issue 10675, reporting that moving a recurring task through the local REST API leaves its repeat configuration in the old project. An open pull request addresses that behavior. Automation users should check the fix's status before relying on API-driven moves.

Vikunja deserves a look if shared task management is your main requirement. Tasks.org is a more natural shortlist entry for an Android-centered task list, while ActivityWatch records computer activity when retrospective time accounting matters more than planning tasks. For Super Productivity itself, try importing real work and restoring an exported backup before moving your entire routine. The schedule is easy to appreciate; recovering your tracked time is the part worth proving.

Alternatives

ProjectWhat it isPick it when
Vikunja gh↗A task manager with self-hosted and hosted options for individuals and teams.pick this instead when shared task management matters more than a personal timeboxing workspace.
Tasks.orgAn Android task app descended from Astrid, with desktop work currently labeled alpha.pick this instead when an Android-centered task list is the main requirement.
ActivityWatchA local activity recorder that tracks active applications and browser tabs.pick this instead when you need to understand time already spent rather than schedule tasks.

Sources

  1. Super Productivity README
  2. Web app and desktop differences
  3. SuperSync deployment guide
  4. Development server guide
  5. v19.2.0 release notes
  6. Recurring-task REST API move report
  7. Repository activity and metadata

More dev tools reviews

compose-samples · librepods · sqlmap · coucou · world-execute-me-dsh-pv · mcp-extensions · the whole board →