All 74 Dependencies

Every package Bramble depends on, ranked by repo health score.

Bramble is a local-first password manager built around a simple premise: your vault never touches a server you don't control. Every credential is encrypted on your own device — inside a browser extension's private storage on desktop, or in app-private encrypted storage on iOS and Android — and stays there. There's no account to create and no company holding a copy of your secrets to lose in a breach.

To use one vault across several devices, Bramble syncs it directly, peer-to-peer, over an end-to-end encrypted WebRTC channel, with a minimal Nostr relay used only to help devices find each other, never to carry vault data. A single Rust cryptography core, compiled to WebAssembly in the browser and to a native library on iOS and Android, does all key derivation and encryption behind a LUKS-style envelope scheme: one random Vault Encryption Key (VEK) protects every entry, each unlock method (master password, hardware security key, or recovery code) wraps its own copy of that VEK in its own key slot, and every entry additionally gets its own per-entry key wrapped under the VEK. Argon2id derives password-based keys, AES-256-GCM does the encrypting, and derived keys are wiped from memory after use.

The same vault format and crypto core back a Chromium browser extension, a Firefox add-on, and native iOS and Android apps with system AutoFill, biometric unlock, and passkey support built on WebAuthn. Entries cover logins, payment cards, secure notes, SSH keys, and TOTP codes, with smart URL matching so subdomains of the same site share one entry. For anyone who wants a copy off-device, Bramble exports encrypted `.bramble` backup files, and the browser extension can schedule automatic encrypted backups to Dropbox, S3-compatible storage, or a self-hosted WebDAV server.

25 coset 0.3 outdated 33 vite-plugin-babel ^1.7.3 35 serde-wasm-bindgen 0.6 36 @aparajita/capacitor-secure-storage ^8.0.0 39 check-password-strength ^3.0.0 42 Capacitor Filesystem ^8.1.2 42 clsx ^2.1.1 42 tw-animate-css ^1.0.0 44 fflate ^0.8.3 45 cbc 0.1 outdated 45 jsQR ^1.4.0 47 Ciborium 0.2 50 Tailwind CSS Forms ^0.5.11 52 hmac 0.12 outdated 53 snow 0.9 outdated 55 hkdf 0.12 outdated 59 argon2 0.5 outdated 62 getrandom 0.2 outdated 65 chacha20 0.9 outdated 65 tailwind-variants ^3.2.2 66 DOM Testing Library ^10.4.1 66 React Testing Library ^16.3.2 67 aes 0.8 outdated 68 base64 0.22 outdated 69 OTPAuth ^9.3.0 71 sha2 0.10 outdated 73 qrcode.react ^4.2.0 74 zeroize 1.8 76 serde_json 1 77 flate2 1 77 serde 1 78 curve25519-dalek 2 outdated 78 UniFFI 0.31 outdated 79 concurrently ^9.1.0 outdated 80 aes-gcm 0.10 outdated 80 tldts ^6.1.0 outdated 81 @capacitor/app ^8.1.0 82 Capacitor ^8.4.1 83 class-variance-authority ^0.7.1 83 k256 0.13 outdated 85 ws ^8.21.1 86 fast-xml-parser ^5.8.0 87 quick-xml 0.37 outdated 88 TanStack Virtual (React) ^3.14.6 88 tailwind-merge ^2.6.0 outdated 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 sharp ^0.35.3 90 Tabler Icons React ^3.45.0 90 Tailwind CSS ^4.3.0 90 Tailwind CSS ^4.3.0 90 Zod ^4.4.3 91 Playwright ^1.61.1 91 lucide-react ^0.469.0 outdated 91 webrtc 0.17 outdated 92 Astro ^0.9.9 outdated 92 @vitejs/plugin-react ^6.0.2 92 Astro ^7.1.1 92 jsdom ^29.1.1 outdated 92 React Hook Form ^7.54.0 92 Vitest ^4.1.7 outdated 93 Anthropic TypeScript SDK ^0.106.0 outdated 93 wasm-bindgen 0.3 outdated 93 Tokio 1 93 Vite ^8.0.13 93 wasm-bindgen 0.2 94 @babel/core ^8.0.1 94 @babel/core ^8.0.1 94 TanStack Router ^1.170.6 96 TypeScript ^5.5.0 outdated 97 React ^19.2.6 97 React DOM ^19.2.6

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers

Search