$ show dani-garcia/vaultwarden

[account ↗] [repo ↗] APPLICATION ★ 68192 3253 ● active (last update 3 weeks ago)

── AI DEEP ANALYSIS ──

reviewed by: deepseek/deepseek-v4-flash

Vaultwarden is a self-hosted, open-source password manager server that provides a full Bitwarden-compatible API. Written in Rust using the Rocket web framework, it implements the entire Bitwarden client API for vault management, organizations, SSO/OIDC authentication, two-factor authentication (TOTP, WebAuthn, Duo, YubiKey, email), secure file storage, send functionality, emergency access, event logging, and push notifications. The architecture is a monolithic web service backed by Diesel ORM supporting SQLite, MySQL, PostgreSQL, and CockroachDB. File attachments are stored via an OpenDAL abstraction (local filesystem or S3). The server is deployed as a single binary or Docker container, serving its own web vault UI and an admin panel. External dependencies include the Bitwarden push relay service for mobile notifications and the upstream Bitwarden protocol for client compatibility. The codebase is well-structured with clear separation of concerns, extensive migrations, and a comprehensive Playwright test suite. It is actively maintained and widely adopted with over 68k stars.

── METRICS ──

RATING9.3/10

QUALITY8.2/10

MAINTENANCEactive

DRIFTlow

CONTRIBUTORS205

VELOCITY0.95

OPEN ISSUES87

CLOSED ISSUES2786

LAST COMMIT3 weeks ago

── TAGS ──

#password-manager #self-hosted #bitwarden-compatible #rust #rocket-framework #diesel-orm #web-server #authentication #vaultwarden #bitwarden #docker #rocket #bitwarden-rs

── GITHUB TOPICS ──

vaultwarden bitwarden rust docker rocket bitwarden-rs

── DEPENDENCY GRAPH ──

macros (cargo) { path = "./macros" }

log (cargo) 0.4.34

fern (cargo) 0.7.1

tracing (cargo) 0.1.44

dotenvy (cargo) 0.15.7

num-traits (cargo) 0.2.19

num-derive (cargo) 0.5.1

bigdecimal (cargo) 0.4.10

rocket (cargo) 0.5.1

rocket_ws (cargo) 0.1.1

rmpv (cargo) 1.3.1

dashmap (cargo) 6.2.1

futures (cargo) 0.3.34

tokio (cargo) 1.53.1

tokio-util (cargo) 0.7.19

serde (cargo) 1.0.229

serde_json (cargo) 1.0.151

diesel (cargo) 2.3.13

diesel_migrations (cargo) 2.3.2

derive_more (cargo) 2.1.1

diesel-derive-newtype (cargo) 2.1.3

libsqlite3-sys (cargo) 0.38.2

rand (cargo) 0.10.2

ring (cargo) 0.17.14

rustls (cargo) 0.23.45

subtle (cargo) 2.6.1

uuid (cargo) 1.26.1

chrono (cargo) 0.4.45

chrono-tz (cargo) 0.10.4

time (cargo) 0.3.55

job_scheduler_ng (cargo) 2.5.0

data-encoding (cargo) 2.11.1

jsonwebtoken (cargo) 11.1.0

totp-lite (cargo) 2.0.1

yubico_ng (cargo) 1.0.0

webauthn-rs (cargo) 0.5.5

webauthn-rs-proto (cargo) 0.5.5

webauthn-rs-core (cargo) 0.5.5

url (cargo) 2.5.8

lettre (cargo) 0.11.23

percent-encoding (cargo) 2.3.2

email_address (cargo) 0.2.9

handlebars (cargo) 6.4.4

reqwest (cargo) 0.13.5

hickory-resolver (cargo) 0.26.3

html5gum (cargo) 0.8.4

regex (cargo) 1.13.1

data-url (cargo) 0.3.2

bytes (cargo) 1.12.1

svg-hush (cargo) 0.9.7

cached (cargo) 4.0.0

cookie (cargo) 0.18.2

cookie_store (cargo) 0.22.1

openssl (cargo) 0.10.81

pico-args (cargo) 0.5.0

pastey (cargo) 0.2.3

governor (cargo) 0.10.4

ipnet (cargo) 2.12.2

openidconnect (cargo) 4.0.1

moka (cargo) 0.12.16

semver (cargo) 1.0.28

mimalloc (cargo) 0.1.52

which (cargo) 8.0.6

argon2 (cargo) 0.6.0

rpassword (cargo) 7.5.4

grass_compiler (cargo) 0.13.4

opendal (cargo) 0.59.2

opendal-http-transport-reqwest (cargo) 0.59.2

aws-config (cargo) 1.12.0

aws-credential-types (cargo) 1.3.0

aws-smithy-runtime-api (cargo) 1.16.2

http (cargo) 1.5.0

reqsign-aws-v4 (cargo) 3.3.0

reqsign-core (cargo) 3.3.1

── FILE BREAKDOWN ──

Files by Type (count)

SQL

242

Other (.hbs)

Rust

TypeScript

YAML

JavaScript

Shell

Other (.svg)

Other (.png)

TOML

Other (no ext)

Dockerfile

Files by Type (size)

Rust

1MB

JavaScript

729KB

CSS

299KB

Lock File

159KB

Other (.hbs)

144KB

JSON

126KB

TypeScript

80KB

SQL

58KB

YAML

42KB

Other (.svg)

34KB

Other (.template)

33KB

Text

33KB

── KEY FINDINGS: REUSABLE CODE ──

The LLM identified 3 files worth highlighting for reuse:

A standalone proc-macro crate providing derive macros (`UuidFromParam`, `IdFromParam`) for Rocket parameter guards. These macros auto-generate Rocket `FromParam` implementations for UUID and other ID types, reducing boilerplate and ensuring consistent parsing. The crate is fully isolated and can be extracted into any Rocket project needing similar parameter parsing.

file: macros/src/lib.rs ↗ | tags: #proc-macro #rocket-guard #parameter-parsing

Defines the application's error type system with powerful macros (`make_error!`, `err!`, `err_silent!`, `err_code!`) for consistent error creation, logging, and JSON serialization. Implements Rocket's `Responder` trait for automatic HTTP error responses. The pattern is self-contained and could be extracted as a reusable error-handling framework for any Rocket-based API, demonstrating non-obvious ergonomic design.

file: src/error.rs ↗ | tags: #error-handling #macros #rocket-responder

A highly configurable HTTP client builder with a custom DNS resolver that validates IP addresses against allow/block lists, domain regex filters, and IPv4/IPv6 preferences. Designed to prevent SSRF and DNS rebinding attacks, it wraps `reqwest` and `hickory-resolver` into a clean, reusable abstraction. This component can be extracted into any Rust project requiring a secure outbound HTTP client.

file: src/http_client.rs ↗ | tags: #http-client #dns-resolver #security #ip-validation

── HISTORY ──

Last analyzed: 2026-09-26 18:11:27.060072

Next check: 2026-10-03 18:11:26.998850