Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
18174Commits captured
17449AI analyses
103High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17449 analyses
Highest risk·RSS
Low 25 AI analysisMessage 45 · Thin
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

remove the noneeded cancel op

This commit removes a single function call, FpCancelCurOperate(), from the lock screen's verification loading animation. The function likely cancels any ongoing fingerprint operation before showing a 'please wait' verification hint. Withou…

Fingerprint/ biometric operation cancellation behavior changedLock-screen verification flow modifiedCommit message is minimal and does not explain security relevance
4bc89798by aaron+0−11 file
No security note in commit
Moderate 57 AI analysisMessage 62 · Adequate
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

fix: fix the issue on lock screen pw and fp race issue

This commit fixes a race condition on the lock screen between password verification and fingerprint recognition. Previously, if a fingerprint scan result arrived while a password was being verified, the two flows could interfere with each …

Race condition between password and fingerprint authentication flows on lock screenFingerprint recognition results processed during password verification loading stateMissing synchronization between biometric and passcode unlock paths
2051feefby aaron+22−34 files
No security note in commit
Informational 15 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add basic test module for serde functionality

This commit only adds a new test file and a development-only dependency (serde_json) to verify that a recently added serde feature serializes byte arrays as expected. It does not change any production code, fix any bug, or alter any securi…

b2e229d3by Mitchell Bagot+55−04 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated API listing files (text snapshots of public symbols). It shows that some serde helper modules moved from the `bitcoin_primitives` crate to the `bitcoin_consensus_encoding` crate and that two external crat…

fed8a134by Mitchell Bagot+11−92 files
No security note in commit
Informational 18 AI analysisMessage 58 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Move serde_as_consensus to consensus_encoding

This commit is a routine code reorganization: it moves a serde helper module from one internal crate to another and updates import paths. There is no change to how data is encoded, decoded, or validated, and no security bug is introduced o…

05c8ddb2by Mitchell Bagot+267−2896 files
No security note in commit
Informational 20 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add hex extern to consensus_encoding

This is a small Rust crate housekeeping change. The `hex` crate was already part of the public API of `consensus_encoding`, but it was not re-exported at the crate's top level. The commit adds that re-export so downstream users can access …

984b7761by Mitchell Bagot+3−01 file
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add serde dep to consensus_encoding

This commit only adds the serde library as a dependency to a Rust Bitcoin sub-crate and wires up feature flags. It does not change any logic, parsing, serialization, or security-sensitive code. There is no indication of a vulnerability or …

d6a7362eby Mitchell Bagot+9−46 files
No security note in commit
Informational 17 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Replace use of HexPrimitive in serde_as_consensus

This is a routine internal code cleanup in the rust-bitcoin library. It replaces one way of turning data into hex text with another, simpler in-house implementation. There is no indication of a security bug being fixed.

34360ccdby Mitchell Bagot+17−21 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Remove macros module from internals

This commit is a routine internal code cleanup. It moves a compile-time assertion helper macro from a dedicated 'macros' file into the main library file and deletes the now-empty macros file. There is no user-facing behavior change and no …

9b8020c2by Mitchell Bagot+13−172 files
No security note in commit
Informational 15 AI analysisMessage 35 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

internals: Update API files

This commit only updates three text files that list the project's public API surface. It removes entries for some internal macros and a module that are no longer publicly exposed. There are no code changes, no bug fixes, and no security re…

d7f527f0by Mitchell Bagot+0−123 files
No security note in commit
Informational 15 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Remove unused and deprecated macros from internals::macros

This commit simply deletes unused and already-deprecated helper macros from an internal Rust source file. No code that was actually in use is changed, and no security-sensitive behavior is modified. It is a routine cleanup with no security…

67d2df3fby Mitchell Bagot+0−2111 file
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this