Both actively maintained.
Homepage: https://dnscrypt.org/ and https://github.com/jedisct1/dnscrypt-proxy
Why should this be included in the repository? Secures the last mile and prevents spoofing. Very performant.
Is it Open Source (yes/no): Yes.
Dependencies: ldns, libsodium and libevent.
Extra: systemd units need to be tweaked.
Link to source tarball/zip file: https://github.com/jedisct1/dnscrypt-proxy/releases/download/1.7.0/dnscrypt-proxy-1.7.0.tar.bz2
Ideally it should be used with unbound.
Why should this be included in the repository? Unbound is a blazing fast validating, recursive, and caching DNS server. It is quite useful for enforcing DNSSEC and caching DNS queries. Best used in conjunction with DNSCrypt.
Is it Open Source (yes/no): Yes, BSD licence.
Link to source tarball/zip file: https://www.unbound.net/downloads/unbound-1.5.10.tar.gz
Notes: Have to ensure the port dnscrypt uses (in its socket file) is forwarded in /etc/unbound.conf with the option forward-addr: 127.0.0.1@53 should you include a standard unbound.conf file, in which case I recommend reading this article https://wiki.installgentoo.com/index.php/Unbound