OSS Leaderboard

Post-Quantum Readiness Ranking

Public repositories scored for quantum-safe cryptography. Lower score = better.

100 repos · live

#	Repository	Score	Language	Files	Last scan
🥇	IdentityServer/IdentityServer4	0/100Quantum-Safe Certified	unknown	0	38d
🥈	fenics-project/dolfin	0/100Quantum-Safe Certified	unknown	0	36d
🥉	firstcontributions/first-contributions	0/100Quantum-Safe Certified	unknown	0	22d
4	gitlab-org/gitaly	0/100Quantum-Safe Certified	unknown	0	43d
5	gitlab-org/gitlab	0/100Quantum-Safe Certified	unknown	0	24d
6	libvirt/libvirt	0/100Quantum-Safe Certified	unknown	0	36d
7	octocat/Hello-World	0/100Quantum-Safe Certified	unknown	0	25d
8	torproject/tor	0/100Quantum-Safe Certified	unknown	0	43d
9	wireshark/wireshark	0/100Quantum-Safe Certified	unknown	0	43d
10	fdroid/fdroidclient	5/100Quantum-Safe	Kotlin	30	41d
11	python/cpython	5/100Quantum-Safe	h	200	30d
12	ILIAS-eLearning/ILIAS	8/100Quantum-Safe	Java	200	17d
13	JetBrains/kotlin	8/100Quantum-Safe	Kotlin	200	26d
14	KIT-CMS/CROWN	8/100Quantum-Safe	Python	88	32d
15	MetaMask/metamask-extension	8/100Quantum-Safe	TypeScript	30	43d
16	OrchardCMS/OrchardCore	8/100Quantum-Safe	C#	200	38d
17	aaif-goose/goose	8/100Quantum-Safe	Rust	200	16d
18	abpframework/abp	8/100Quantum-Safe	TypeScript	30	38d
19	ansible/ansible	8/100Quantum-Safe	Python	30	43d
20	anthropics/claude-plugins-official	8/100Quantum-Safe	Python	41	21d
21	apache/mina-sshd	8/100Quantum-Safe	Java	30	52d
22	aws/aws-sdk-js	8/100Quantum-Safe	JavaScript	30	46d
23	bitwarden/server	8/100Quantum-Safe	C#	200	38d
24	certbot/certbot	8/100Quantum-Safe	Python	30	43d
25	certifi/python-certifi	8/100Quantum-Safe	Python	6	17d
26	cffi/cffi	8/100Quantum-Safe	C	5	30d
27	cilium/cilium	8/100Quantum-Safe	Go	200	8d
28	claroline/Claroline	8/100Quantum-Safe	JavaScript	200	17d
29	django/django	8/100Quantum-Safe	Python	200	32d
30	dkhamsing/open-source-ios-apps	8/100Quantum-Safe	Ruby	14	16d
31	dogecoin/dogecoin	8/100Quantum-Safe	h	30	43d
32	dotnet/aspnetcore	8/100Quantum-Safe	C#	200	38d
33	ethereum/devp2p	8/100Quantum-Safe	JavaScript	1	29d
34	ethers-io/ethers.js	8/100Quantum-Safe	TypeScript	30	43d
35	farion1231/cc-switch	8/100Quantum-Safe	Rust	200	24d
36	gaiabio12-design/agricolaEfra-app	8/100Quantum-Safe	TypeScript	9	24d
37	gaiabio12-design/elizaos-plugin-quantumscan	8/100Quantum-Safe	YAML	1	4d
38	gaiabio12-design/guate-roots-connect	8/100Quantum-Safe	TypeScript	30	53d
39	google/comprehensive-rust	8/100Quantum-Safe	Rust	146	20d
40	gpg/gnupg	8/100Quantum-Safe	h	30	43d
41	helix-editor/helix	8/100Quantum-Safe	Rust	200	27d
42	inkscape/inkscape	8/100Quantum-Safe	Python	12	36d
43	jestjs/jest	8/100Quantum-Safe	json	200	13d
44	lobehub/lobehub	8/100Quantum-Safe	TypeScript	200	23d
45	microsoft/semantic-kernel	8/100Quantum-Safe	C#	200	38d
46	mrdoob/three.js	8/100Quantum-Safe	JavaScript	200	27d
47	neomutt/neomutt	8/100Quantum-Safe	C	30	43d
48	neovim/neovim	8/100Quantum-Safe	h	200	12d
49	netty/netty	8/100Quantum-Safe	Java	200	30d
50	nextcloud/server	8/100Quantum-Safe	PHP	200	25d
51	nikitabobko/AeroSpace	8/100Quantum-Safe	Swift	200	24d
52	openiddict/openiddict-core	8/100Quantum-Safe	JavaScript	30	38d
53	pnpm/pnpm	8/100Quantum-Safe	Rust	200	12d
54	pola-rs/polars	8/100Quantum-Safe	Rust	200	9d
55	prysmaticlabs/prysm	8/100Quantum-Safe	Go	200	29d
56	pypy/pypy	8/100Quantum-Safe	Python	200	30d
57	quantumscan-io/quantumscan-web	8/100Quantum-Safe	TypeScript	30	50d
58	signalapp/libsignal	8/100Quantum-Safe	Rust	30	45d
59	simplex-chat/simplex-chat	8/100Quantum-Safe	Kotlin	200	3d
60	sindresorhus/got	8/100Quantum-Safe	TypeScript	78	32d
61	solana-labs/solana	8/100Quantum-Safe	Rust	200	29d
62	spring-projects/spring-security	8/100Quantum-Safe	Java	200	36d
63	sshnet/SSH.NET	8/100Quantum-Safe	C#	30	52d
64	strapi/strapi	8/100Quantum-Safe	TypeScript	200	10d
65	sxyazi/yazi	8/100Quantum-Safe	Rust	200	27d
66	tiangolo/fastapi	8/100Quantum-Safe	Python	200	31d
67	tortoisegit/tortoisegit	8/100Quantum-Safe	C#	30	43d
68	torvalds/linux	8/100Quantum-Safe	h	30	46d
69	trufflesecurity/trufflehog	8/100Quantum-Safe	Go	200	19d
70	twentyhq/twenty	8/100Quantum-Safe	TypeScript	200	22d
71	warpdotdev/warp	8/100Quantum-Safe	Rust	200	25d
72	wasp-lang/wasp	8/100Quantum-Safe	TypeScript	200	19d
73	zed-industries/zed	8/100Quantum-Safe	Rust	200	11d
74	NixOS/nixpkgs	12/100Quantum-Safe	Python	200	14d
75	curl/curl	12/100Quantum-Safe	C	200	36d
76	deepset-ai/haystack	12/100Quantum-Safe	Python	200	9d
77	chamilo/chamilo-lms	15/100Quantum-Safe	PHP	200	17d
78	google/boringssl	15/100Quantum-Safe	cc	30	46d
79	gitbutlerapp/gitbutler	25/100Low Risk	Rust	200	18d
80	libressl-portable/portable	25/100Low Risk	h	81	30d
81	chromium/chromium	32/100Low Risk	Python	200	17d
82	aquasecurity/trivy	35/100Low Risk	Go	200	18d
83	auth0/node-jsonwebtoken	35/100Low Risk	JavaScript	47	14d
84	openssl/openssl	35/100Low Risk	h	30	43d
85	psf/requests	35/100Low Risk	Python	37	32d
86	servo/servo	35/100Low Risk	Rust	200	14d
87	PostHog/posthog	42/100Moderate	Python	200	8d
88	astral-sh/uv	42/100Moderate	Rust	200	11d
89	axios/axios	42/100Moderate	JavaScript	200	32d
90	caddyserver/caddy	42/100Moderate	Go	200	13d
91	docling-project/docling	42/100Moderate	Python	200	17d
92	gitlab-org/gitlab-runner	42/100Moderate	Go	30	43d
93	pyca/cryptography	42/100Moderate	Python	200	31d
94	NTPsec/ntpsec	45/100Moderate	C	30	43d
95	encode/httpx	45/100Moderate	Python	60	32d
96	nopSolutions/nopCommerce	45/100Moderate	C#	200	38d
97	zeroclaw-labs/zeroclaw	45/100Moderate	Rust	200	8d
98	Keyfactor/ejbca-ce	68/100High Risk	Java	200	35d
99	muttmua/mutt	68/100High Risk	C	30	43d
100	square/okhttp	68/100High Risk	Kotlin	200	30d