GnuPG
Free implementation of OpenPGP
The score summarizes repository activity. Funding is unknown and excluded from the score. These repository signals do not establish financial stability, security, or maintainer availability. How to interpret this data.
Evidence and limitations
Activity source: gpg/gnupg via the GitHub API. Counts describe this repository, which may be a mirror or only part of the project.
- Commits in 30 days
- 29
- Commits in 90 days
- 92
- Authors accounting for half the sampled commits
- 1
The sampled commit history reached the 90-day boundary or the end of the repository history.
Few commits can reflect mature software. Commit authors do not establish merge rights, available maintainers, organizational diversity, or knowledge distribution. Funding is unknown; donation links alone do not establish income or runway.
Correct this assessment or provide evidence →Ways to help GnuPG
GnuPG’s donation page says it established a financing model and asks recurring donors to redirect funds to other projects. We have not independently audited its finances.
- Help reproduce or fix a reported bug
Search existing reports, include a minimal reproduction, and follow the project’s patch and security-reporting guidance.
Official sources checked . GnuPG funding statement · GnuPG bug-reporting guidance. These are public participation routes, not a maintainer-confirmed urgent request.
People associated with this project
Profiles include creators, contributors, and former maintainers. This is not a complete roster of the current team.
Overview
GnuPG (GNU Privacy Guard) is a free implementation of the OpenPGP standard for encrypting and signing data and communications.
Importance
- Foundation of email encryption
- Powers package signing for Linux distros
- Critical for software supply chain security
- Used for secure communications
Key Features
- Encryption and signing
- Key management
- S/MIME support
- Smart card support
Sustainability
GnuPG’s donation page says it established a financing model and asks recurring donors to redirect funds to other projects. We have not independently audited its finances. GnuPG funding statement. GnuPG bug-reporting guidance.
Source pages checked 2026-10-02. Financial capacity has not been independently assessed.
Dependencies
