CVSTrac's home [L1 ] advertises it as "A Web-Based Bug And Patch-Set Tracking System For CVS". To developers, it offers SCM functionality, layered over CVS. It's roughly comparable to Bonsai. It improves on CVS with the key abstraction of "change sets" or "patch-sets".
Key to effective use of CVSTrac is its "timeline" [explain]. This [L2 ] is the live timeline for tktoolkit, which illustrates [explain]. DRH writes, "When you have multiple people working on a project, the timeline is invaluable for keeping up with what others are doing. . . . Timeline-like stuff is very important to CMM nazis." A timeline quickly answers such questions as, "What's news since release X.XX?"
CVSTrac builds in a convenient Wiki. Its reporting facility permits arbitrary SQL queries. It "tickets" [explain] conveniently.
Startup instructions for CVSTrac are here [L3 ].
What will it take so that CVSTrac uses HTTP authentication?