Top pick · highest health
Vaultwarden
Lightweight Bitwarden server API implementation written in Rust.
Password Managers
We track 6 open-source LastPass alternatives, of which 5 currently score 70 or above on Repoly's GitHub health scale and 4 ship a Docker image. Vaultwarden leads on health at 99/100 with 79 commits in the last 90 days; across all 6 projects you are choosing between AGPL-3.0, Apache-2.0, GPL-3.0.
Healthiest
Health 99/100: 79 commits in 90 days, latest release 1.37.4, Docker image available.
Most active
937 commits in the last 90 days, more than any other option here.
Permissive licence
Apache-2.0, so you can fork or embed it without publishing changes; health 73/100.
Showing 6 of 6 tools
Top pick · highest health
Lightweight Bitwarden server API implementation written in Rust.
Password manager with a webapp, browser extension, and mobile app.
Collaborative password manager.
Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP.
Password manager for companies.
Simple password manage with sharing features by group and user, but no administration interface.
Vaultwarden edges Bitwarden 99 to 97, and most of the difference is stars: 70k stars against 21k stars. Bitwarden is the busier codebase, though, with 458 commits in 90 days to 79.
The most recent release is Psono v7.0.30, published yesterday. None of the measured options scores under 40. By stack, PHP (2), Python (2) and C# (1) are the most common. Psono is permissively licensed; Vaultwarden, Bitwarden, Passbolt and 2 more are copyleft. PassIt is not hosted on a forge Repoly can read, so it has no measured score yet.
6 of these 6 also appear among the 1Password alternatives, which lists 1 more.
| Tool | Health | Stars | Licence | Last commit | Docker |
|---|---|---|---|---|---|
| Vaultwarden Steady at 99 since 11 Sep | 99 | 70k | GPL-3.0 | yesterday | Yes |
| Bitwarden Steady at 97 since 11 Sep | 97 | 21k | AGPL-3.0 | yesterday | Yes |
| Passbolt Steady at 95 since 11 Sep | 95 | 6.2k | AGPL-3.0 | 10 days ago | Yes |
| Teampass Steady at 83 since 11 Sep | 83 | 1.9k | GPL-3.0 | yesterday | No |
| Psono Steady at 73 since 27 Sep | 73 | 6 | Apache-2.0 | yesterday | No |
| PassIt | 20 | 0 | AGPL-3.0 | unknown | Yes |
Vaultwarden scores highest at 99/100, with 79 commits in the last 90 days, 70k stars on GitHub and its latest release (1.37.4) published 25 days ago. Teampass has the most raw commit activity at 937 commits in 90 days.
1 of 6 are permissively licensed (MIT, Apache, BSD or similar): Psono (Apache-2.0). 5 use copyleft licences such as GPL or AGPL, which require you to publish changes if you distribute a modified version.
4 of 6 publish a Docker image or Compose file: Vaultwarden, Bitwarden, Passbolt, PassIt. Docker support contributes 10 of the 100 available health points, because it is the clearest signal that self-hosting is a supported path rather than an afterthought.
On measured health Vaultwarden leads, 99 to 97. Vaultwarden has 79 commits in 90 days, 70k stars and 1.37.4 from 25 days ago; Bitwarden has 458 commits in 90 days, 21k stars and v2026.10.1 from 2 days ago. Vaultwarden is ahead or level on every term Repoly measures.
5 of the 5 measured options score 70 or above. Every measured option had commits in the last 90 days. None scores under 40.
PHP: Passbolt and Teampass. Python: Psono and PassIt. C#: Bitwarden. The stack matters if you plan to extend or patch the tool yourself.