OSS Monitor · Sovereign Tech Agency projects Figures built 2026-10-13 23:06 UTC · each repository scanned at its current commit

20% of 80 open-source projects funded by the Sovereign Tech Agency have post-quantum cryptography in their source.

The technologies the Sovereign Tech Agency lists as funded, mapped to their source repositories and scanned at the current commit.

PQ in source
20%
16 of 80 projects
Funded technologies
84
of 98 funded technologies map to one public repository, scanned here
Key exchange and signaturesKey exchange onlySignatures onlyNone
# Ecosystem n PQ in source What the projects have
1 goLOW N 6
50%3/6
2 rubygemsLOW N 4
50%2/4
3 cargoLOW N 14
35.7%5/14
4 cLOW N 20
25%5/20
5 npmLOW N 8
12.5%1/8
6 mavenLOW N 8
0%0/8
7 pypiLOW N 7
0%0/7
8 packagistLOW N 5
0%0/5
9 docsLOW N 4
0%0/4
10 fortranLOW N 1
0%0/1
11 haskellLOW N 1
0%0/1
12 kotlinLOW N 1
0%0/1
13 nixLOW N 1
0%0/1

Projects

Projects with post-quantum cryptography in source first. Each project links to its repository at the commit scanned.

Project Ecosystem Funding round PQ Algorithms Commit
ProtonMail/gopenpgp go Past Yes ML-DSA-65, ML-DSA-87, ML-KEM, SLH-DSA
Files and lines
dcc4859aba4c
forgejo/forgejo go Current Yes ML-KEM-768, ML-KEM-1024, SecP256r1MLKEM768, X25519MLKEM768
Files and lines
acce8bbc3efd
freebsd/freebsd-src c Current Yes Composite ML-DSA-44 with Ed25519, ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-512, ML-KEM-768, ML-KEM-1024, SecP256r1MLKEM768, SLH-DSA-SHA2-128s, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-256s, sntrup761, X25519MLKEM768
Files and lines
74d2a0b79ffd
letsencrypt/boulder go Current Yes ML-DSA-44, ML-DSA-65
Files and lines
f877538d2f0a
mastodon/mastodon rubygems Current Yes ML-DSA-44
Files and lines
415c613dd18a
openmls/openmls cargo Past Yes ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-768, ML-KEM-1024
Files and lines
7c94cc351ea7
openpgpjs/openpgpjs npm Past Yes ML-DSA-65, ML-KEM-768
Files and lines
8bc35df48879
openssh/openssh-portable c Past Yes Composite ML-DSA-44 with Ed25519, ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-768, sntrup761
Files and lines
773771be4ae2
openssl/openssl c Current Yes HSS-LMS, LM-OTS, ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-512, ML-KEM-768, ML-KEM-1024, SecP256r1MLKEM768, SLH-DSA-SHA2-128s, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-256s, X25519MLKEM768
Files and lines
0e24154dc80f
php/php-src c Current Yes ML-KEM-768
Files and lines
59b790a54ac1
rosenpass/rosenpass cargo Past Yes Classic McEliece, Kyber-512
Files and lines
e77fd9f9e028
ruby/rubygems rubygems Past Yes ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-768, X25519MLKEM768
Files and lines
6db466b0012c
rustls/rustls cargo Current Yes ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-512, ML-KEM-768, ML-KEM-1024, SecP256r1MLKEM768, X25519MLKEM768
Files and lines
bdd525243536
sequoia-pgp/sequoia cargo Current Yes ML-DSA-65, ML-DSA-87, ML-KEM-768, ML-KEM-1024, SLH-DSA
Files and lines
d092dfb5502c
servo/servo cargo Current Yes ML-DSA-44, ML-DSA-65, ML-DSA-87, ML-KEM-512, ML-KEM-768, ML-KEM-1024
Files and lines
bfcbea95680e
systemd/systemd c Current Yes ML-DSA-44
Files and lines
195a17c59b22
CycloneDX/cyclonedx-rust-cargo cargo Challenge No 9037ba4cfd6f
NLnetLabs/cascade cargo Current No 57e2565b8084
NLnetLabs/domain cargo Past No 0b708231d7cf
NixOS/nixpkgs nix Challenge No 22579286c995
OpenMathLib/OpenBLAS c Past No 33746423e74d
OpenPrinting/cups c Current No e33ef5d2c9de
Shnatsel/wondermagick cargo Current No dfdf8a91b582
WireGuard/wireguard-go go Past No 2631ce99a06f
apache/airflow pypi Challenge No 43129ecb6335
apache/arrow c Current No 7ee15283bc9f
apache/logging-log4j2 maven Past No c0de1b862820
apache/maven maven Current No 05b8933ed20b
archlinux/alpm cargo Current No 926abd016952
babel/babel npm Current No 0915316cf4a6
chatmail/core cargo Current No d766641ce27e
ci-team/debci rubygems Current No ee8c4aa16c61
conda-incubator/conda-store pypi Challenge No 9177dc6692ac
conda/conda pypi Current No 60768e21bc8a
cs3org/OCM-API docs Current No cbd5882b98eb
curl/curl c Past No 2b348649c68c
drupal/automatic_updates packagist Past No 064f7820bb9f
drupal/drupal packagist Current No 4f9558d85e7d
fedify-dev/fedify npm Current No f56118e19779
ffmpeg/ffmpeg c Current No 01cf1a539698
flatpak/flatpak c Current No cbe1f2939b68
fortran-lang/fpm fortran Past No 9a4433dd1918
gcc/gcc c Past No 4dc98e3ecd1b
gnunet/libmicrohttpd c Current No 7922bbd7a956
gnunet/libmicrohttpd2 c Current No 24a2913c4e1c
gstreamer/gstreamer c Past No df435f8224be
haskell/cabal haskell Challenge No ad1170e77e46
joomla/joomla-cms packagist Current No 45c6f2e68571
junit-team/junit-framework maven Current No 1ef55a6a9a24
kaoh/globalplatform c Current No 877bbe17cd42
kungfooman/RuntimeTypeInspector.js npm Challenge No 903a45b2bb7f
lodash/lodash npm Current No 2b5e6f7399a7
lxc/incus go Current No 24a8bf273793
mamba-org/mamba c Past No a92f4715ddf1
mdn/browser-compat-data npm Challenge No 3c8956296515
mdn/content docs Current No 151d527b2d48
openbgpd/openbgpd-portable c Past No f6f8f2d7ce21
openpgp/notes docs Challenge No 5a313612bd39
openstreetmap/openstreetmap-website rubygems Current No ec8e36b7a04d
osgi/osgi maven Current No 8c7184dad437
oss-review-toolkit/ort kotlin Current No dc51bff85a32
ossf/scorecard go Current No a1fe90aafa91
package-url/purl-spec pypi Current No 766b9f6d82b6
pendulum-project/ntpd-rs cargo Past No d89fbb3916d1
phpseclib/phpseclib packagist Current No a7e0d129f3d6
phpstan/phpstan-src packagist Current No 62ed20078660
pipewire/pipewire c Current No 593bfe2334aa
pmd/pmd maven Current No 0c9fdc54e91f
processing/p5.js npm Challenge No f694279f30c6
processing/processing4 maven Current No be0ee8266e07
pypi/warehouse pypi Past No 20c44b559589
qos-ch/logback maven Past No 1ae6acb45f91
samba/samba c Current No 8b0a1064742f
scala/scala3 maven Current No 88be2f56a110
sequoia-pgp/sequoia-git cargo Past No d5eb012e3c91
skforecast/skforecast pypi Current No 3ecc0dc3d251
socialweb.coop/activitypub-testing npm Past No 4e308023d0f2
swicg/activitypub-e2ee docs Current No 0ae3026e0e14
uutils/coreutils cargo Past No 1747ba15b6af
yoctoproject/poky pypi Past No 5c2b3d184065

LOW N marks fewer than 30 projects. Key exchange: ML-KEM, Kyber, hybrid groups such as X25519MLKEM768, Streamlined NTRU Prime and Classic McEliece. Signatures: ML-DSA, SLH-DSA, LMS and HSS, XMSS and Falcon.

Data

Current state.

Projects
80 of 80 repositories scanned: the repositories of the 84 of 98 technologies the Sovereign Tech Agency lists as funded on sovereign.tech that map to one, as listed on 13 October 2026. No single repository: Python Software Foundation, KDE, Trifecta Tech Foundation, Rust Foundation, Eclipse Foundation, GNOME, OpenJS Foundation, Prossimo, Reproducible Builds (2023 and 2025), Igalia Web Interop 2025 (several browser engines); SDCC and R Project are in Subversion; Vinyl Cache has published none.
Scanner
pqprobe-static, at each repository's current commit. The commit is in each project's row.
Contact
Questions, corrections and opt-outs: hello@pqprobe.com.

Your code, not just ours.

This monitor reads public repositories. An assessment covers your own code, keys and infrastructure.