All 80 Dependencies

Every package Bramble depends on, ranked by repo health score.

Bramble is a local-first password manager built around a simple premise: your vault never touches a server you don't control. Every credential is encrypted on your own device — inside a browser extension's private storage on desktop, or in app-private encrypted storage on iOS and Android — and stays there. There's no account to create and no company holding a copy of your secrets to lose in a breach.

To use one vault across several devices, Bramble syncs it directly, peer-to-peer, over an end-to-end encrypted WebRTC channel, with a minimal Nostr relay used only to help devices find each other, never to carry vault data. A single Rust cryptography core, compiled to WebAssembly in the browser and to a native library on iOS and Android, does all key derivation and encryption behind a LUKS-style envelope scheme: one random Vault Encryption Key (VEK) protects every entry, each unlock method (master password, hardware security key, or recovery code) wraps its own copy of that VEK in its own key slot, and every entry additionally gets its own per-entry key wrapped under the VEK. Argon2id derives password-based keys, AES-256-GCM does the encrypting, and derived keys are wiped from memory after use.

The same vault format and crypto core back a Chromium browser extension, a Firefox add-on, and native iOS and Android apps with system AutoFill, biometric unlock, and passkey support built on WebAuthn. Entries cover logins, payment cards, secure notes, SSH keys, and TOTP codes, with smart URL matching so subdomains of the same site share one entry. For anyone who wants a copy off-device, Bramble exports encrypted `.bramble` backup files, and the browser extension can schedule automatic encrypted backups to Dropbox, S3-compatible storage, or a self-hosted WebDAV server.

25 coset 0.3 outdated 33 vite-plugin-babel ^1.7.3 35 serde-wasm-bindgen 0.6 39 check-password-strength ^3.0.0 42 clsx ^2.1.1 42 tw-animate-css ^1.0.0 43 cbc 0.1 outdated 43 fflate ^0.8.3 44 jsQR ^1.4.0 47 Capacitor Filesystem ^8.1.2 48 hmac 0.12 outdated 49 Tailwind CSS Forms ^0.5.11 49 hkdf 0.12 outdated 50 Ciborium 0.2 52 snow 0.9 outdated 57 argon2 0.5 outdated 59 chacha20 0.9 outdated 59 getrandom 0.2 outdated 60 @aparajita/capacitor-secure-storage ^8.0.0 64 React Testing Library ^16.3.2 65 tailwind-variants ^3.2.2 66 base64 0.22 outdated 67 DOM Testing Library ^10.4.1 67 qrcode.react ^4.2.0 67 sha2 0.10 outdated 68 aes 0.8 outdated 69 OTPAuth ^9.3.0 71 zeroize 1.8 72 serde_json 1 73 flate2 1 76 aes-gcm 0.10 outdated 76 serde 1 77 curve25519-dalek 2 outdated 78 UniFFI 0.31 outdated 78 concurrently ^9.1.0 outdated 81 fast-xml-parser ^5.8.0 82 class-variance-authority ^0.7.1 82 k256 0.13 outdated 82 k256 0.13 outdated 82 tldts ^6.1.0 outdated 84 @capacitor/app ^8.1.0 84 @capacitor/app ^8.0.1 84 @capacitor/app ^8.0.2 84 @capacitor/app ^8.0.1 84 @capacitor/app ^8.0.0 84 @capacitor/app ^8.0.1 84 Capacitor ^8.4.1 84 quick-xml 0.37 outdated 84 ws ^8.21.1 86 tailwind-merge ^2.6.0 outdated 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 Lingui ^6.4.0 89 jsdom ^29.1.1 outdated 90 Tailwind CSS ^4.3.0 90 Tailwind CSS ^4.3.0 90 TanStack Virtual (React) ^3.14.6 90 sharp ^0.35.3 91 Tabler Icons React ^3.45.0 91 webrtc 0.17 outdated 92 Astro ^0.9.9 outdated 92 Astro ^7.1.1 92 Playwright ^1.61.1 92 React Hook Form ^7.54.0 92 Zod ^4.4.3 92 lucide-react ^0.469.0 outdated 93 @vitejs/plugin-react ^6.0.2 93 Anthropic TypeScript SDK ^0.106.0 outdated 93 Vitest ^4.1.7 outdated 93 wasm-bindgen 0.3 outdated 93 wasm-bindgen 0.2 94 @babel/core ^8.0.1 94 @babel/core ^8.0.1 94 TanStack Router ^1.170.6 94 Vite ^8.0.13 95 Tokio 1 97 TypeScript ^5.5.0 outdated 98 React ^19.2.6 98 React DOM ^19.2.6

All 80 Dependencies

Join founders buildingwith open source