You will be lucky to get serious numbers of bug fixes on that timetable I suspect. These codebases are hard to work with. Been there done that. I would look at

You will be lucky to get serious numbers of bug fixes on that timetable I suspect. These codebases are hard to work with. Been there done that. I would look at migrating the clients to another product that works, or even a less forked version of vtiger.