bramble-sh / bramble
Local-first password manager with direct device-to-device sync
- Stars
- 609 stars
- Forks
- 28 forks
- Language
- TypeScript
- License
- GPL-3.0
- Created
- Jun 1, 2026
- Last push
- Nov 11, 2026
- Updated
- Nov 11, 2026
Why these Tags: an agent read the README and quoted it
- Password manager from the description:
Local-first password manager with direct device-to-device sync
- Browser extension from the readme:
**Browser extension** for Firefox and Chromium browsers (Brave, Vivaldi, Chrome, Arc, and friends).
- iOS app from the readme:
**iOS app** with system AutoFill, Face ID / Touch ID unlock, and passkeys.
- Android app from the readme:
**Android app** with a native autofill service, biometric unlock, and passkeys.
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 8, 2026: +100 stars in 7 days.
Star History
133 days recorded, Jul 2, 2026 – Nov 11, 2026 (UTC). Net change +612 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/bramble-sh/bramble) Badge
[](https://awesomerepos.com/bramble-sh/bramble) Timeline
It gained stars on 105 of the 133 days recorded since Jul 2, 2026.
Its largest 7 days were Jul 2, 2026 to Jul 8, 2026: 204 stars.
In the 30 days to Nov 11, 2026 it got 185 stars, 302% more than in the 30 days before.
- Created on the Repository Host
- +54 stars in one day
- Reached 100 stars, 34 days after it was created
- Largest star day recorded: +56 stars
- Reached 500 stars, 154 days after it was created
- +38 stars in one day
- Entered the Repository Index: +100 stars in 7 days
- Release 0.16.0-desktop: Desktop 0.16.0
- Release 0.17.0-desktop: Desktop 0.17.0
- Release 0.29.0-android: Android 0.29.0
- Release 1.35.0-firefox: Firefox Extension 1.35.0
- Release 1.38.0-chromium: Chromium Extension 1.38.0
- Renamed from flythenimbus/bramble to bramble-sh/bramble
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 4 Observations, Nov 9, 2026 – Nov 12, 2026. Forks +3. AwesomeRepos saw a new push on 3 of 3 days.
- Nov 10, 2026: new push
- Nov 11, 2026: new push
- Nov 12, 2026: new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos last read these facts from GitHub on Nov 10, 2026. How AwesomeRepos defines each check
Copies a prompt for a coding agent. It has 2 tasks for the maintainers of bramble-sh/bramble.
Improve the Health Facts of the GitHub repository bramble-sh/bramble. AwesomeRepos measures facts about how a repository is maintained, released, secured, and documented. Its page for this repository is https://awesomerepos.com/bramble-sh/bramble. A change to the repository can improve each of the 2 items below. Each item gives the measured fact or score, and a task. 1. A changelog file at the root Fact: No changelog file at the root (GitHub, 2026-11-10). Rule: The root of the default branch has a file named CHANGELOG, CHANGES, HISTORY, NEWS, RELEASE, or RELEASES, with no extension or with .md, .markdown, .rst, .txt, or .adoc. Release notes on GitHub releases do not count. Task: Add CHANGELOG.md at the root of the default branch. Write one section for each published release, newest first, from the GitHub releases, the Git tags, and the commit history. Do not invent changes. If the project uses a release tool (for example Changesets, release-please, or semantic-release), configure it to update this file for each release. 2. A code of conduct Fact: GitHub finds no code of conduct (GitHub, 2026-11-10). Rule: GitHub finds a code of conduct in the repository or in the owner's .github repository. Task: Add CODE_OF_CONDUCT.md at the root with the Contributor Covenant 2.1 text. Change only the contact method. Ask me for the contact; do not invent one. Rules for this work: - Each file must be true for this project. Do not copy text that does not apply to it. - Do not choose a licence, a contact, or a release version for me. Ask me. - Do not publish a release, change a repository setting, or push to the default branch. Make the changes on a new branch. - Keep each change small, and run the checks of this repository before you finish. - At the end, list each item as DONE, SKIPPED (with the reason), or NEEDS A DECISION (with the question). AwesomeRepos reads these facts again in its next scan. The definitions of the checks: https://awesomerepos.com/health-facts
Maintenance
3 of 4 checks-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-11, 0 days ago. Source
-
Yes: Commits in the last 13 weeks
903 commits on the default branch in the last 13 weeks (GitHub, 2026-11-10). Source
-
No: Commits in 26 or more of the last 52 weeks
Commits in 25 of the last 52 weeks (GitHub, 2026-11-10). Source
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 15
- 20
- 8
- 40
- 66
- 87
- 122
- 87
- 173
- 77
- 110
- 108
- 66
- 69
- 72
- 72
- 53
- 71
- 35
- 2
- 42
- 30
- 59
- 131
- 201
Releases
2 of 3 checks-
Yes: A release in the last 365 days
Newest release 0.17.0-desktop on 2026-11-09, 2 days ago. 10 or more releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is 0.17.0-desktop. Source
-
No: A changelog file at the root
No changelog file at the root (GitHub, 2026-11-10).
Security practice
1 of 1 check-
Yes: A security policy
GitHub finds a security policy (GitHub, 2026-11-10). Source
OpenSSF Scorecard has no result for this repository from the last 90 days.
Community files
2 of 3 checksDependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 1,009 direct packages (scanned on Nov 10, 2026). Packages from 54 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 54
- react/react 253K
npm: react, react-dom
- tauri-apps/tauri 113K
Cargo: tauri, tauri-build, tauri-codegen, tauri-macros and 4 more
npm: @tauri-apps/api, @tauri-apps/cli
- microsoft/TypeScript 112K
npm: typescript
- microsoft/playwright 100K
npm: @playwright/test
-
npm: @tailwindcss/vite, tailwindcss
- vitejs/vite 84K
npm: vite
- withastro/astro 64K
npm: @astrojs/check, @astrojs/mdx, astro
-
npm: @types/better-sqlite3, @types/chrome, @types/node, @types/react and 2 more
-
npm: react-hook-form
- colinhacks/zod 44K
npm: zod
Show all 54
- babel/babel 44K
npm: @babel/plugin-syntax-jsx, @babel/preset-typescript
-
npm: drizzle-kit, drizzle-orm
- tokio-rs/tokio 34K
Cargo: tokio, tokio-macros, tokio-util
- honojs/hono 33K
npm: hono
- lovell/sharp 33K
npm: sharp
- biomejs/biome 26K
npm: @biomejs/biome
-
npm: lucide-react
- websockets/ws 23K
npm: ws
-
npm: @tabler/icons
- jsdom/jsdom 22K
npm: jsdom
-
npm: @testing-library/react
-
npm: vitest
-
npm: @capacitor/android, @capacitor/cli, @capacitor/core, @capacitor/ios
-
Cargo: smol_str
- hyperium/hyper 16K
Cargo: hyper
- dropbox/zxcvbn 16K
npm: zxcvbn
- rust-lang/cargo 16K
Cargo: cargo-platform
- TanStack/router 15K
npm: @tanstack/react-router
-
Cargo: windows, windows-collections, windows-core, windows-future and 19 more
-
Cargo: reqwest
- serde-rs/serde 11K
Cargo: serde, serde_core, serde_derive, serde_derive_internals
- rust-bakery/nom 10K
Cargo: nom
-
Cargo: js-sys, wasm-bindgen, wasm-bindgen-futures, wasm-bindgen-macro and 3 more
- rustls/rustls 7.7K
Cargo: rustls
- lucaong/minisearch 6.2K
npm: minisearch
- lingui/js-lingui 5.9K
npm: @lingui/babel-plugin-lingui-macro, @lingui/cli, @lingui/core, @lingui/format-po and 2 more
- webrtc-rs/webrtc 5.2K
Cargo: dtls, interceptor, rtcp, rtp and 11 more
- zpao/qrcode.react 4.3K
npm: qrcode.react
- briansmith/ring 4.1K
Cargo: ring
- cozmo/jsQR 4.1K
npm: jsqr
- mozilla/web-ext 3.2K
npm: web-ext
-
npm: fast-xml-parser
- RustCrypto/hashes 2.3K
Cargo: blake2, md-5, sha1, sha2
- mcginty/snow 1.1K
Cargo: snow
- RustCrypto/AEADs 975
Cargo: aes-gcm, ccm, chacha20poly1305
-
npm: @noble/hashes
-
Cargo: argon2
-
Cargo: k256, p256, p384, primeorder
-
Cargo: fiat-crypto
-
npm: @capacitor/app, @capacitor/clipboard, @capacitor/device, @capacitor/preferences and 2 more
-
Cargo: ecdsa, ed25519, rfc6979
-
Cargo: base16ct, base64ct, const-oid, der and 4 more
-
npm: @aparajita/capacitor-secure-storage
-
npm: @capacitor/filesystem
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 3, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 12, 2026: 609 stars, 28 forks, last push Nov 11, 2026, not archived. One of 4 Observations since Nov 9, 2026.