CVSTrac's home [http://www.cvstrac.org/] advertises it as "A Web-Based Bug And Patch-Set Tracking System For [CVS]". To developers, it offers [SCM] functionality, layered over [CVS]. It's roughly comparable to [Bonsai]. It improves on CVS with the key abstraction of "change sets" or "patch-sets". Key to effective use of CVSTrac is its "timeline" [[explain]]. This [http://cvs.hwaci.com/tktoolkit/timeline] is the live timeline for [tktoolkit], which illustrates [[explain]]. [DRH] writes, "When you have multiple people working on a project, the timeline is invaluable for keeping up with what others are doing. . . . Timeline-like stuff is very important to [CMM] nazis." A timeline quickly answers such questions as, "What's news since release X.XX?" CVSTrac builds in a convenient [Wiki]. Its reporting facility permits arbitrary [SQL] queries. It "tickets" [[explain]] conveniently. Startup instructions for CVSTrac are here [http://www.cvstrac.org/cvstrac/wiki?p=CvstracInstallation]. ---- What will it take so that CVSTrac uses [HTTP] authentication?