dani-garcia/vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

69k stars · 3.3k forks · Rust

Caution

Caution: the published package has not been released in two years.

Why

The crates.io package vaultwarden has had no release since April 2021, while the repository has 213 human commits in the last year; the old release has 7 known security advisories (GHSA-g5x8-v2ch-gj2g, GHSA-h4hq-rgvh-wh27, GHSA-r32r-j5jq-3w4m), which do not show whether the current code is affected. (source 1, source 2, source 3, source 4, source 5, source 6, source 7, source 8, source 9)

What would change this

A new package release is published.

Maintenance

Complete

Active

Human commits, 30 days: 34
Human commits, 90 days: 67
Human commits, 365 days: 213
Bot share of commits, 365 days: 0%
Last commit: Oct 10, 2026 (4 days ago)
Last human commit: Oct 10, 2026 (4 days ago)
Authors, 90 days: 26
Last release: Oct 5, 2026 (9 days ago)
Median PR merge time: 2 days

Responsiveness: of 30 recent issues, 37% got a maintainer reply. Median first response: under an hour.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete

Owner: Personal account
Commits sampled: 213 since Oct 14, 2025
Authors for half of commits: 3
Authors for 80% of commits: 10
Contributors: 193

Top committers

BlackDex: 29% of commits
Timshel: 16% of commits
stefan0xC: 11% of commits
dani-garcia: 8% of commits
dfunkt: 7% of commits

The top committer changed during this period.

Sources: Commits, Contributors

Stars

Complete

Organic, confidence high

Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Jul 11, 2018 to Jul 12, 2018: about 31 more stars than usual, peak 24 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Oct 6, 2019 to Oct 9, 2019: about 104 more stars than usual, peak 71 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Jan 5, 2020 to Jan 5, 2020: about 41 more stars than usual, peak 48 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Aug 5, 2020 to Aug 5, 2020: about 60 more stars than usual, peak 66 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Feb 16, 2021 to Feb 23, 2021: about 553 more stars than usual, peak 191 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Mar 15, 2021 to Mar 18, 2021: about 212 more stars than usual, peak 145 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Apr 30, 2021 to May 3, 2021: about 179 more stars than usual, peak 81 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Dec 23, 2021 to Dec 30, 2021: about 367 more stars than usual, peak 141 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Dec 23, 2022 to Dec 29, 2022: about 278 more stars than usual, peak 83 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jan 25, 2023 to Jan 26, 2023: about 245 more stars than usual, peak 224 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Mar 28, 2023 to Mar 29, 2023: about 56 more stars than usual, peak 65 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jul 28, 2023 to Aug 1, 2023: about 204 more stars than usual, peak 79 in one day, a flat block of stars. Outside explanation: a jump in forks, a jump in issues and pull requests.
Aug 13, 2024 to Aug 14, 2024: about 180 more stars than usual, peak 122 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Oct 20, 2024 to Oct 21, 2024: about 169 more stars than usual, peak 146 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Nov 12, 2024 to Nov 12, 2024: about 60 more stars than usual, peak 92 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jun 26, 2025 to Jun 29, 2025: about 229 more stars than usual, peak 133 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Dec 29, 2025 to Dec 30, 2025: about 72 more stars than usual, peak 86 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jan 12, 2026 to Jan 12, 2026: about 56 more stars than usual, peak 102 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Feb 24, 2026 to Feb 27, 2026: about 423 more stars than usual, peak 262 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Mar 31, 2026 to Mar 31, 2026: about 88 more stars than usual, peak 138 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Apr 23, 2026 to Apr 25, 2026: about 382 more stars than usual, peak 231 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
May 18, 2026 to May 19, 2026: about 138 more stars than usual, peak 145 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Aug 23, 2026 to Aug 25, 2026: about 253 more stars than usual, peak 175 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Sep 14, 2026 to Sep 15, 2026: about 156 more stars than usual, peak 186 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.

5 stars GitHub has since removed (tracked since Oct 13, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

The star history looks organic.

Sources: How star history is analyzed

Risk

Complete

Flags

Warning: The latest release of the Cargo package vaultwarden was published more than 24 months ago, while the repository has had 213 human commits in the last year (deps.dev); the old release has 7 known security advisories (GHSA-g5x8-v2ch-gj2g, GHSA-h4hq-rgvh-wh27, GHSA-r32r-j5jq-3w4m), which do not show whether the current code is affected. Details

License

Now: AGPL-3.0 (OSI-approved)
A year ago: AGPL-3.0 (OSI-approved)

Packages

vaultwarden (CARGO): latest 0.0.1, published Apr 11, 2021
Advisories for the latest version: GHSA-g5x8-v2ch-gj2g (low), GHSA-h4hq-rgvh-wh27 (high), GHSA-r32r-j5jq-3w4m (high), GHSA-v6pg-v89r-w8wr (moderate), GHSA-vprm-27pv-jp3w (low), GHSA-w9f8-m526-h7fh (moderate), GHSA-x7m9-mv49-fv73 (high)

Package and advisory data: deps.dev and OSV.

Sources: GitHub: dani-garcia/vaultwarden, deps.dev: Cargo vaultwarden, OSV: GHSA-g5x8-v2ch-gj2g, OSV: GHSA-h4hq-rgvh-wh27, OSV: GHSA-r32r-j5jq-3w4m, OSV: GHSA-v6pg-v89r-w8wr, OSV: GHSA-vprm-27pv-jp3w, OSV: GHSA-w9f8-m526-h7fh, OSV: GHSA-x7m9-mv49-fv73

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/dani-garcia/vaultwarden/badge.svg)](https://reporadar.ai/dani-garcia/vaultwarden)

Earlier verdicts

Oct 14, 2026: Caution
Oct 13, 2026: Caution
Oct 13, 2026: At risk

Computed 18 hours ago · method 2026.10.2