Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
18174Commits captured
17449AI analyses
103High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17449 analyses
Highest risk·RSS
Informational 18 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Replace impl_to_hex_from_lower_hex with deprecated inherent to_hex

This is a routine code cleanup change. It replaces an internal helper macro that generated `to_hex` methods with manually-written, equivalent `to_hex` methods that are marked as deprecated. The public API behavior stays the same; callers w…

No security signals present in the diff or commit message.Change is a pure refactor/deprecation with behavioral equivalence.
a88ecdfaby Mitchell Bagot+49−506 files
No security note in commit
Informational 15 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Move impl_array_newtype to include/array_newtype.rs

This commit is a routine code reorganization. It moves a Rust macro called impl_array_newtype from one internal location to a shared include file and updates call sites to use the new location. No behavior changes, bug fixes, or security f…

177d87b8by Mitchell Bagot+130−1279 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

feat: add vizor wallet to cypherpunk

This commit simply adds a new wallet called 'Vizor' to the list of supported wallets in the Keystone 3 firmware's user interface. It includes a new icon image and registers the wallet name so users can select it. There is no indication of …

7a5cef79by soralit+91−17 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

run font scripts

This commit is a routine localization and asset update. It adds a Polish language translation, updates Korean font data to include one additional character, fixes minor code indentation, and reorders some translated strings. There is no ev…

d2ccb0eeby ww3512687+1471−5284 files
No security note in commit
Informational 22 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

tor: skip onion cleanup before service creation

This commit fixes a bug in how LND's Tor controller shuts down. Previously, during startup cleanup, the controller would try to delete an onion service that might never have been created, which could hide the real reason why creating the o…

Error-handling improvement that prevents masking of original ADD_ONION failuresEnsures control connection is closed even when DEL_ONION failsPrevents stopped flag from being consumed when no connection exists
d7ee3429by Boris Nagaev+152−102 files
No security note in commit
Informational 19 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

rpc: Add load_wallet argument to migratewallet RPC

This commit adds a new optional 'load_wallet' argument to the 'migratewallet' RPC command in Bitcoin Core. It lets users choose whether the wallet should be automatically loaded after migration, defaulting to true to preserve existing beha…

No security-relevant keywords in commit title or messageNo input validation, parsing, or memory-safety changes observedNew boolean argument defaults to true, preserving prior behavior
b98dd63dby Pol Espinasa+5−12 files
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: tests wallet migration with load_wallet disabled

This commit only adds new automated tests for Bitcoin Core's wallet migration feature. It checks that when a wallet is migrated with the 'load_wallet=False' option, the wallet is not automatically loaded afterward, settings are updated cor…

517d37ceby Pol Espinasa+144−31 file
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

add release note

This commit only adds a release note describing a previously merged feature. It does not change any code, configuration, or behavior. There is no security issue in this commit itself.

0cdd817aby Pol Espinasa+7−01 file
No security note in commit
Informational 23 AI analysisMessage 73 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

wallet: make loading the wallet after migrating optional

This Bitcoin Core change lets users migrate old-style wallets to the newer descriptor format without automatically loading the migrated wallet afterward. The main goal is to support pruned nodes, which previously could not migrate because …

No direct vulnerability signal in diffChange is feature-oriented: optional wallet loading after migrationDefensive setting update: old wallet removed from startup list when not loaded
4acd063bby Pol Espinasa+36−222 files
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): avoid allocation in `confirm_payment_request()`

This is a small internal code cleanup in the Trezor firmware's Ethereum transaction confirmation flow. It changes several function parameters from 'Iterable' (a general 'can be looped over' type) to 'Sequence' (a type that supports indexin…

Type-hint-only refactor with no runtime validation changesRemoval of list() allocation in caesar confirm_payment_requestNo explicit security claim in commit message or diff
0f93b31eby Roman Zeyde+23−238 files
No security note in commit
Low 26 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(vendor): disable unused MicroPython features

This commit turns off several unused features in the MicroPython interpreter that runs on Trezor hardware wallets. It is a hardening change that reduces the amount of code available to an attacker, but it does not by itself fix a known, ex…

Disables MicroPython module weak links, removing a dynamic module-resolution mechanismDisables the str.center builtin, removing a string-formatting code pathMakes uctypes conditional on !BITCOIN_ONLY, removing a C-struct introspection module from Bitcoin-only builds
c21e4efaby Roman Zeyde+6−62 files
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this