CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
24Projects watched
17776Commits captured
17247AI analyses
98High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17247 analyses
Highest risk·RSS
Low 46 AI analysisMessage 56 · Thin
LL Lightning LabsLND BitcoinLightning Network

chanstate: fix htlc copy

This commit fixes a bug in how the Lightning Network Daemon (LND) copies payment channel data. When the program made a copy of an HTLC (a pending payment in a Lightning channel), it failed to copy several important fields and did not prope…

Incomplete deep copy of security-relevant channel stateMissing fields in HTLC clone (RHash, OnionBlob, HtlcIndex, LogIndex)Nil-slice copy bug for Signature and ExtraData
b720fd5cby ziggie+88−42 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
LL Lightning LabsLND BitcoinLightning Network

channeldb: document legacy fwd packager interface

This commit only adds a documentation comment (a TODO note) to an existing interface in the channel database code. No code behavior was changed, no bug was fixed, and no security issue is present in the diff.

c5aabdf8by ziggie+4−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
LL Lightning LabsLND BitcoinLightning Network

chanstate: split commitment store interface

This commit is a pure code refactoring change. It takes one existing Go interface called OpenChannelCommitmentStore and splits it into two smaller interfaces: one for write/mutation operations and one for read/query operations. The origina…

07ede43aby ziggie+11−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

channeldb: derive channel packagers

This commit is a code cleanup: it removes a forwarding-package helper object from the in-memory channel state and instead creates it on demand inside database methods. There is no direct security fix or vulnerability being patched. It main…

No security-relevant keywords in commit title or messageNo changes to cryptographic operations, authentication, or network parsingRefactoring only: field removal and localized object construction
0229e0adby ziggie+47−989 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

chanstate: move channel snapshot type

This commit is a simple code reorganization: it moves a data structure called ChannelSnapshot from one package (channeldb) to another (chanstate), and leaves a compatibility alias so existing code keeps working. There are no functional cha…

aeab363aby ziggie+46−342 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
LL Lightning LabsLND BitcoinLightning Network

chanstate: move taproot channel helpers

This commit is a routine code reorganization: it moves two helper functions and a constant related to Taproot channels from one internal package (channeldb) to another (chanstate), and leaves aliases in the old location so existing callers…

c065aa91by ziggie+93−632 files
No security note in commit
Open full analysis →Source commit ↗
Informational 11 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

channeldb: add store status check

This commit is a small internal code cleanup in LND's channel database code. It adds a new public helper method that lets store/serialization code check a channel's status without grabbing a lock, and switches a few internal serialization …

No security-relevant behavioral change: the predicate logic is unchanged.No bounds checks, input validation, cryptographic operations, or resource limits are modified.No race condition or synchronization bug is introduced or fixed; the new method is explicitly documented as non-locking and for internal store callers only.
6eef3ad6by ziggie+14−31 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
LL Lightning LabsLND BitcoinLightning Network

chanstate: move open channel type

This commit is a pure internal code reorganization (refactor). It moves the OpenChannel data type and its methods from the channeldb package into a new chanstate package, while leaving a compatibility alias in channeldb so existing code ke…

3adc0133by ziggie+1302−12717 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
LL Lightning LabsLND BitcoinLightning Network

chanstate: move revocation log types

This commit is a straightforward code reorganization: it moves data type definitions and serialization helpers for revocation logs from the channeldb package into a new chanstate package, while keeping the actual database storage code in c…

dbc9a701by ziggie+603−5073 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

chanstate: add previous state lookup

This commit only adds a new method declaration to an internal Go interface in LND's channel state package. It does not change any running code, data handling, or security behavior. The commit message explicitly says it extends the store co…

1bcd4d65by ziggie+5−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
LL Lightning LabsLND BitcoinLightning Network

channeldb: move revocation tail helper

This is a small internal code cleanup. A helper function used only in tests is moved from one object to another so it does not become part of a new storage interface. There is no user-facing change and no security fix.

e2812246by ziggie+2−152 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
LL Lightning LabsLND BitcoinLightning Network

channeldb: store channel state by interface

This commit is a straightforward internal code cleanup: it changes the type of one field in LND's channel database from a concrete database pointer to a more generic 'Store' interface. The goal is to make future refactoring easier, not to …

40234f3cby ziggie+79−306 files
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →