All 80 Dependencies

Every package Bramble depends on, ranked by repo health score.

Bramble is a local-first password manager built around a simple premise: your vault never touches a server you don't control. Every credential is encrypted on your own device — inside a browser extension's private storage on desktop, or in app-private encrypted storage on iOS and Android — and stays there. There's no account to create and no company holding a copy of your secrets to lose in a breach.

To use one vault across several devices, Bramble syncs it directly, peer-to-peer, over an end-to-end encrypted WebRTC channel, with a minimal Nostr relay used only to help devices find each other, never to carry vault data. A single Rust cryptography core, compiled to WebAssembly in the browser and to a native library on iOS and Android, does all key derivation and encryption behind a LUKS-style envelope scheme: one random Vault Encryption Key (VEK) protects every entry, each unlock method (master password, hardware security key, or recovery code) wraps its own copy of that VEK in its own key slot, and every entry additionally gets its own per-entry key wrapped under the VEK. Argon2id derives password-based keys, AES-256-GCM does the encrypting, and derived keys are wiped from memory after use.

The same vault format and crypto core back a Chromium browser extension, a Firefox add-on, and native iOS and Android apps with system AutoFill, biometric unlock, and passkey support built on WebAuthn. Entries cover logins, payment cards, secure notes, SSH keys, and TOTP codes, with smart URL matching so subdomains of the same site share one entry. For anyone who wants a copy off-device, Bramble exports encrypted `.bramble` backup files, and the browser extension can schedule automatic encrypted backups to Dropbox, S3-compatible storage, or a self-hosted WebDAV server.

32 vite-plugin-babel ^1.7.3 35 serde-wasm-bindgen 0.6 39 check-password-strength ^3.0.0 42 cbc 0.1 outdated 42 clsx ^2.1.1 42 coset 0.3 outdated 42 tw-animate-css ^1.0.0 43 fflate ^0.8.3 44 jsQR ^1.4.0 46 hkdf 0.12 outdated 47 hmac 0.12 outdated 49 Tailwind CSS Forms ^0.5.11 50 snow 0.9 outdated 52 Ciborium 0.2 53 Capacitor Filesystem ^8.1.2 56 base64 0.22 outdated 57 @aparajita/capacitor-secure-storage ^8.0.0 57 argon2 0.5 outdated 58 chacha20 0.9 outdated 60 getrandom 0.2 outdated 61 React Testing Library ^16.3.2 64 DOM Testing Library ^10.4.1 65 qrcode.react ^4.2.0 67 aes 0.8 outdated 68 tailwind-variants ^3.2.2 69 OTPAuth ^9.3.0 69 curve25519-dalek 2 outdated 73 aes-gcm 0.10 outdated 73 serde 1 74 sha2 0.10 outdated 78 UniFFI 0.31 outdated 78 concurrently ^9.1.0 outdated 79 k256 0.13 outdated 79 k256 0.13 outdated 80 zeroize 1.8 81 @capacitor/app ^8.1.0 81 @capacitor/app ^8.0.1 81 @capacitor/app ^8.0.2 81 @capacitor/app ^8.0.1 81 @capacitor/app ^8.0.0 81 @capacitor/app ^8.0.1 81 fast-xml-parser ^5.8.0 81 flate2 1 81 tldts ^6.1.0 outdated 82 class-variance-authority ^0.7.1 84 serde_json 1 84 ws ^8.21.1 88 Capacitor ^8.4.1 88 quick-xml 0.37 outdated 89 tailwind-merge ^2.6.0 outdated 90 Lingui ^6.4.0 90 Lingui ^6.4.0 90 Lingui ^6.4.0 90 Lingui ^6.4.0 90 Tailwind CSS ^4.3.0 90 Tailwind CSS ^4.3.0 90 jsdom ^29.1.1 outdated 90 sharp ^0.35.3 91 TanStack Virtual (React) ^3.14.6 91 Zod ^4.4.3 92 @vitejs/plugin-react ^6.0.2 92 Astro ^0.9.9 outdated 92 Astro ^7.1.1 92 Playwright ^1.61.1 92 React Hook Form ^7.54.0 92 Tabler Icons React ^3.45.0 92 lucide-react ^0.469.0 outdated 92 webrtc 0.17 outdated 93 Tokio 1 93 Vitest ^4.1.7 outdated 94 Anthropic TypeScript SDK ^0.106.0 outdated 94 TanStack Router ^1.170.6 94 Vite ^8.0.13 94 wasm-bindgen 0.3 outdated 94 wasm-bindgen 0.2 95 @babel/core ^8.0.1 95 @babel/core ^8.0.1 95 TypeScript ^5.5.0 outdated 98 React ^19.2.6 98 React DOM ^19.2.6

All 80 Dependencies

Join founders buildingwith open source