CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
24Projects watched
17888Commits captured
17298AI analyses
100High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17298 analyses
Highest risk·RSS
Informational 15 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Replace uses of consensus in tests

This commit only changes test code and documentation examples in the rust-bitcoin library. It replaces older consensus encoding/decoding helper functions with newer equivalents from a different internal module. There is no change to produc…

171f6661by Mitchell Bagot+81−697 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Replace use of con_serde in sighash test

This commit is a routine internal test refactor. It swaps one test-only helper for another so that a unit test can still decode hex transaction data after an older helper is removed. There is no change to production code or to how real tra…

09d0c9dfby Mitchell Bagot+12−32 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Remove old consensus code from examples

This commit only updates example code in the rust-bitcoin project. It replaces older 'consensus' encoding/decoding API calls with newer 'consensus_encoding' API calls in three example files. There is no change to the library's actual secur…

d5cbd077by Mitchell Bagot+22−193 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Adjust fuzz targets to use consensus_encoding

This commit only updates internal fuzz-testing code to use a newer serialization API (consensus_encoding) instead of an older one being removed. It does not change the library's runtime behavior or fix any security bug.

f5041528by Mitchell Bagot+27−249 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): allow fallible conversion of `i16` into `Obj`

This is a small, safe Rust language addition that lets the firmware convert a signed 16-bit integer (i16) into an internal MicroPython object type, mirroring existing conversions already done for unsigned 8-bit and 16-bit integers. There i…

8ad34606by Roman Zeyde+10−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 85 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core/eckhart): simplify device menu handling

This is a code cleanup (refactor) for the device menu on a specific Trezor hardware wallet model. It changes how menu actions are represented internally (from numbers to named strings) and simplifies how the menu decides which submenu to s…

e6e514c9by Roman Zeyde+163−1497 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): keep vertical offset when reloading device menu

This commit fixes a visual glitch on the Trezor T3W1 device where the device menu would visibly jump or flicker when it refreshed. The fix preserves the menu's current scroll position across refreshes by passing an extra offset value throu…

No security-relevant signals observed in the diff.Change is described in changelog as '[T3W1] Fix device menu refresh.'No input validation, memory safety, cryptographic, or authorization changes are present.
f383055eby Roman Zeyde+70−1713 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): update UI fixtures

This commit only updates expected visual test fingerprints (hashes of UI screenshots) in a test data file. No actual product code was changed, so it cannot introduce or fix a security vulnerability on its own.

c9e32e77by Roman Zeyde+72−721 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 83 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

qa: Strip prefix length from NetBSD `ifconfig` output

This is a tiny test-only fix for parsing network interface output on NetBSD. It changes one regular expression so that Bitcoin Core's functional tests can correctly read IP addresses when NetBSD prints them in CIDR notation (like 127.0.0.1…

70352fdaby Hennadii Stepanov+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 16 AI analysisMessage 78 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

qa: Ignore `lsof` warnings on NetBSD

This is a minor test-framework fix for Bitcoin Core's automated QA on NetBSD. It tells the `lsof` network tool to ignore harmless warning messages about device cache files and operating-system version mismatches so those warnings don't bre…

5d01aa47by Hennadii Stepanov+2−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 16 AI analysisMessage 60 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

doc: Add `lsof` to Test Suite Dependencies on NetBSD

This commit only updates the NetBSD build documentation to add the `lsof` utility as a test suite dependency and explains how to force-install it if needed. It is a documentation-only change with no code modifications and no security relev…

5e96a8fdby Hennadii Stepanov+8−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 16 AI analysisMessage 65 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

qa: Support `get_bind_addrs` and `feature_bind_extra` on illumos

This is a small test-only change that lets Bitcoin Core's internal test tools recognize the illumos operating system (reported as 'sunos5') when listing network addresses and interfaces. It does not change the Bitcoin node software itself,…

f4a6d079by Hennadii Stepanov+4−41 file
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →