Backlog.md is an MIT-licensed, markdown-native task manager and kanban visualizer for any git repository: a zero-config CLI where every task is a plain .md file and agents are steered through three human review checkpoints.
The tracker’s real product is the review gates, spec, plan, then code, each a screenful a human can actually read, which makes it the first line of code review rather than a to-do list.
What it is #
Install with npm i -g backlog.md and any folder becomes a project board: tasks live as markdown files with acceptance criteria and a reusable Definition of Done, backlog board paints a live kanban in the terminal, and backlog browser serves a local drag-and-drop web UI.
The pitch is aimed squarely at the agent era: agents produce more code than you can read, so you review the task spec and the implementation plan before the code exists, one task equals one context window equals one PR.
It works with Claude Code, Codex, Gemini CLI, Kiro, Cursor, and anything MCP-compatible, auto-configuring them on demand, and the project dogfoods hard: nearly all of its own code is written by agents working through its own backlog.
It is maintained under the MrLesk identity, with conference talks (Devoxx Belgium 2025) carrying the method.
Status #
Active and healthy at mid-scale.
As of 2026-10-23: 7,024 stars (as of 2026-10-14), 77 open issues and pull requests, pushed 2026-10-23, MIT-licensed, latest release v1.55.2 on 2026-10-22, 88,640 npm downloads last month.
v1.54.0 is a breaking release: backlog task complete and its MCP task_complete tool are removed in favor of marking work Done and archiving it, and archive now preserves the task’s ID, record, dependencies, and references, with restore and delete alongside; it also changed the default task ordering and made previously accepted malformed edits fail.
v1.55.0 (2026-10-20) followed as a repair release: versioned JSON output for draft lists, signal forwarding so stopping the npm and Bun launcher stops its native process, unknown YAML frontmatter preserved when unrelated fields are edited, explicit UTC timestamps, and duplicate task IDs repaired through backlog doctor --fix.
v1.55.1 (2026-10-21) and v1.55.2 (2026-10-22) are security hardening releases patching dependencies and native certificate handling; v1.55.2’s caveat is that native Git HTTPS proxies are temporarily unsupported while direct HTTPS and HTTP CONNECT proxies keep working.
The repo’s quiet stretch since 2026-09-28 ended on 2026-10-07 with README commits adding a Backlog.md + Groma.md integration section, Groma.md being the same author’s separate MIT architecture-map tool (188 stars as of 2026-10-10).
The July 2025 launch thread reached 254 points, the largest HN footprint of the task trackers profiled in this section.
Strengths #
- Everything is markdown in git: diffable, greppable, portable, and readable by humans and agents with no adapter.
- The three-checkpoint model (spec, plan, code) is the most explicit human-oversight design in this category.
- Terminal kanban plus local web UI covers both tastes without accounts or hosting.
- Dogfooding through its own backlog is verifiable in the repo, not a marketing claim.
Cautions #
- Markdown files have no atomic claims or dependency graph, so several agents sharing one board will race where beads serializes them.
- A board of thousands of flat files strains both the kanban view and the human reviewer it exists to protect.
- The review gates depend on agent discipline to seek approval; a yolo-configured agent can steamroll them.
- Bus factor looks small for a tool you might standardize a team on.
Pricing #
Free and open source under MIT. No paid tier, hosting, or account exists.
Compared to #
- beads: graph database with atomic claims; choose beads for multi-agent concurrency, Backlog.md for human reviewability.
- Task Master: PRD-driven pipeline with a company behind it; choose it when you want structure imposed, Backlog.md when you want to impose your own.
- GitHub Issues: hosted and agent-assignable, but the plan lives outside the repo and outside your diffs.
Bottom line #
Recommended as the default first task tracker for agent-heavy repos, solo or small team, where reading the plan beats racing the agents. Not for multi-agent shared queues (no claims) or organizations needing a vendor to blame. My disagreeable claim: its three checkpoints are what spec-driven development actually needed, a enforced review cadence rather than more templates, and spec-kit’s constitution files are weaker oversight than one gate a human actually attends.
Changes #
- 2026-08-27 - Created in the Task management category seed with the three-checkpoint review model, dogfooding claim, and terminal kanban recorded.
- 2026-09-27 - Refreshed scale numbers (6,862 stars, 73 open issues, 64,043 npm downloads) and recorded v1.53.0 (2026-09-24).
- 2026-10-07 - Added the MrLesk/Backlog.md star history chart to the Status section.
- 2026-10-10 - Recorded the README’s Backlog.md + Groma.md integration section (2026-10-07, the same author’s separate architecture-map tool) and refreshed counts (6,986 stars, 89 open issues, 84,452 npm downloads, pushed 2026-10-07).
- 2026-10-17 - Rotation re-verification with every cited URL re-fetched live; recorded the v1.54.0 release (2026-10-16: task complete and its MCP tool removed in favor of Done plus archive, archive keeping the task’s ID, record, dependencies, and references with restore and delete added, new default ordering, malformed edits rejected) and refreshed counts (80 open issues and pull requests, pushed 2026-10-16).
- 2026-10-21 - Recorded the v1.55.0 release (2026-10-20: versioned JSON output for draft lists, launcher signal forwarding, unknown YAML frontmatter preserved on unrelated edits, explicit UTC timestamps, and duplicate task IDs repaired through backlog doctor) and refreshed counts (73 open issues and pull requests, pushed 2026-10-20, 88,640 npm downloads).
- 2026-10-23 - Recorded the v1.55.1 and v1.55.2 security hardening releases (2026-10-21 and 2026-10-22: dependency and certificate-authority patching, with native Git HTTPS proxies temporarily unsupported in v1.55.2) and refreshed counts (77 open issues and pull requests, pushed 2026-10-23).
See also #
- beads - the graph-database counterpoint from the same era
- Task Master - the productized pipeline
- GitHub Spec Kit - the spec-first process layer it complements
- Vibe Kanban - the kanban pattern applied to agents themselves
References #
https://github.com/MrLesk/Backlog.md - README: checkpoints, commands, agent integrations, dogfooding claim
https://api.github.com/repos/MrLesk/Backlog.md - stars, issues, push date, MIT license as of 2026-10-23
https://raw.githubusercontent.com/MrLesk/Backlog.md/main/README.md - the Backlog.md + Groma.md integration section
https://github.com/MrLesk/Backlog.md/releases/tag/v1.54.0 - the v1.54.0 notes: archive replaces complete, restore and delete, the breaking ordering and validation changes
https://api.github.com/repos/MrLesk/Backlog.md/releases/tags/v1.55.0 - the v1.55.0 notes: JSON draft lists, launcher signal forwarding, frontmatter preservation, doctor repair
https://api.github.com/repos/MrLesk/Backlog.md/releases/tags/v1.55.2 - the v1.55.2 notes: certificate-authority hardening and the native Git HTTPS proxy caveat
https://groma.md - the companion product the integration names (resolves to its GitHub repository)
https://api.github.com/repos/MrLesk/groma.md - the companion repo: 188 stars, MIT, as of 2026-10-10
https://news.ycombinator.com/item?id=44483530 - the 254-point launch thread
https://api.npmjs.org/downloads/point/last-month/backlog.md - 88,640 downloads last month
https://mrlesk.com/talks - conference talks demonstrating the method