OpenSSLSecurity & PrivacyGeneral-purpose TLS and cryptography library.Apache-2.0
General-purpose TLS and cryptography library.
OpenSSL supplies protocol libraries and command-line tools for applications using TLS, DTLS and QUIC. Developers can link its protocol implementation or use the underlying cryptographic library independently. The command-line program creates keys and certificate requests, calculates digests, encrypts or decrypts data, and tests protocol clients and servers. It can be built from source or consumed through platform-provided packages.
OpenSSL official README · Reviewed 2026-10-29
- 01 / Feature noteCryptographic library
The libcrypto library can be used independently of the TLS implementation.
Feature source ↗ - 02 / Feature noteCertificate and key tools
The command-line program creates key parameters, X.509 certificates, certificate-signing requests and revocation lists.
Feature source ↗
GitHub stars
31,183
Detected license
Apache-2.0
Repository created
2013-01-15
Repository push
2026-11-04
2013-01-15GitHub release
2026-10-23 · openssl-4.1.0Repository push
2026-11-04
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-15T18:22:24.727650+00:00 · Last successful fetch 2026-10-15T18:22:24.727650+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
6.3/10
Scanned 2026-10-26 · 10 scored / 14 returned
i
- Packaging · Inconclusive
packaging workflow not detected
- Maintained · 10/10
30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
- Token-Permissions · Inconclusive
No tokens found
- Code-Review · 0/10
Found 0/30 approved changesets -- score normalized to 0
- Dangerous-Workflow · Inconclusive
no workflows found
- SAST · 0/10
no SAST tool detected
- CII-Best-Practices · 5/10
badge detected: Passing
- Binary-Artifacts · 10/10
no binaries found in the repo
- License · 10/10
license file detected
- Branch-Protection · Inconclusive
internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
- Fuzzing · 10/10
project is fuzzed
- Pinned-Dependencies · 0/10
dependency not pinned by hash detected -- score normalized to 0
- Signed-Releases · 8/10
5 out of the last 5 releases have a total of 5 signed artifacts.
- Security-Policy · 10/10
security policy file detected
Repository commit 4d885b16ebc6 · Scorecard v5.6.0
Checked 2026-11-03T08:48:35Z · Last successful fetch 2026-11-03T08:48:35Z · Value fetched 2026-11-03T08:48:35Z · Provider source
GitHub release
Published 2026-10-23
i
Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source
Unknown

