Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
17488Commits captured
17116AI analyses
88High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17116 analyses
Highest risk·RSS
Informational 15 AI analysisMessage 55 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

primitives: update API test conventions

This commit is a routine cleanup of test code in the rust-bitcoin project. It renames test functions, adds comments, and reorganizes API surface tests to follow project conventions. There is no change to the actual library code that handle…

75340f51by Nick Johnson+157−1131 file
No security note in commit
Informational 15 AI analysisMessage 82 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

docs: add P-* policy sections to policy doc

This commit only edits a documentation file (docs/policy.md). It adds coding guidelines and a table of contents for the project. There are no code changes, no bug fixes, and no security-related modifications.

06d5381dby Nick Johnson+54−41 file
No security note in commit
Informational 15 AI analysisMessage 90 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

network: extend api test conventions

This commit only renames existing test functions and adds one new internal policy test to verify that a public type implements the Arbitrary trait when the optional 'arbitrary' feature is enabled. It does not change any production code, cr…

11c27e6bby Nick Johnson+20−101 file
No security note in commit
Informational 15 AI analysisMessage 60 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

consensus_encoding: update API test to follow conventions

This commit only renames and recomments test functions in a single Rust test file. It does not change any production code, library behavior, or security-sensitive logic. There is no security issue here.

21e26dd1by Nick Johnson+26−231 file
No security note in commit
Informational 15 AI analysisMessage 95 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: wallet: BnB incomplete result on attempt-limit success

This commit adds a new unit test for Bitcoin Core's coin selection algorithm. It checks that when the Branch-and-Bound (BnB) search finds a usable coin selection early but then keeps searching for a better one until it hits the attempt lim…

6ee05c4bby Bruno Garcia+20−01 file
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

ci: remove github release workflow

This commit simply deletes a GitHub Actions workflow file that automatically created GitHub releases when new version tags were pushed. It is a routine CI/infrastructure change with no code changes and no apparent security relevance.

3a0618aeby Nick Johnson+0−211 file
No security note in commit
Informational 18 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add `impl Clone for Box<{custom DST}>`

This commit adds the ability to clone boxed versions of two custom unsized byte-wrapping types used in Bitcoin scripts. Before this change, code that tried to clone a Box<Script> or Box<PushBytes> would fail to compile. The change is a nor…

No security-relevant keywords in commit title or messageNo unsafe code introduced in the diffNo bounds-checking or validation logic changed
9b738a5fby Martin Habovstiak+50−15 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

tests: fix flaky reckless tests by waiting for the canned github server

This commit fixes a flaky automated test, not a security bug. The test harness previously started a fake GitHub server and sometimes tried to use it before it was ready, causing random test failures. The patch simply waits for the server t…

d4a960baby Ken Sedgwick+16−11 file
No security note in commit
Low 48 AI analysisMessage 68 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

blockencodings: fix extra transaction count

This commit fixes a bookkeeping bug in Bitcoin Core's compact block handling. When receiving a compressed block, the node tries to match short transaction IDs against its own mempool and a small cache of recently seen transactions ('extra_…

Incorrect internal accounting in compact block reconstructionShort ID collision handling could misclassify transaction sourcePotential for collided slots to be refilled by later candidates
6aa5d8d9by Lőrinc+38−182 files
No security note in commit
Low 26 AI analysisMessage 67 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: characterize extra transaction miscount

This commit adds a test case to Bitcoin Core that demonstrates a minor accounting bug in how compact block reconstruction counts 'extra' transactions. The test shows that when a fake transaction in the extra pool happens to have the same s…

Test-only change; no production code modifiedTODO comment indicates known miscount, not a fixCompact block shorttxid collision behavior is characterized
be4e64d9by Lőrinc+21−01 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
LD LedgerLedger Bitcoin app BitcoinHardware wallets

[auto-update] Update Ragger snapshots

This commit only updates automated test screenshots (Ragger snapshots) for the Ledger Bitcoin app. No application code, firmware, or user-facing behavior was changed. It is not a security fix and does not introduce a vulnerability.

fb23ccb2by github-actions[bot]+0−039 files
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this