Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
17490Commits captured
17117AI analyses
88High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17117 analyses
Highest risk·RSS
Informational 15 AI analysisMessage 65 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

bitcoin-util: replace netmagic command with getchainparams command

This commit renames and expands a command-line helper in Bitcoin Core. The old 'bitcoin-util netmagic' command, which only printed the network's magic bytes, is replaced by 'bitcoin-util getchainparams', which prints a JSON document contai…

7298281bby Anthony Towns+223−3516 files
No security note in commit
Informational 15 AI analysisMessage 0 · Opaque
BT BTCPay ServerBTCPay Server BitcoinLightning NetworkPayment infrastructure

Small fixup

This commit is a minor cleanup: it changes how an 'empty transactions' message is created on a wallet page. Previously the message was stored as a chunk of HTML in translation files; now it is built safely in code with plain text. There is…

innerHTML replaced with safe DOM construction (textContent + createElement)Localization key changed from HTML string to plain text stringNo user-controlled input observed in the affected code path
25ac35c7by Nicolas Dorier+6−22 files
No security note in commit
Informational 14 AI analysisMessage 95 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core): move debug asserts into unit tests

This commit is a code cleanup and test reorganization. It moves sanity-check assertions (which verify that hardcoded cryptocurrency addresses and function signatures are correct) out of the main firmware code and into dedicated unit tests.…

No vulnerability patchedNo change to runtime behavior or trust assumptionsDebug-only assertions relocated to unit tests
5990b91fby obrusvit+260−1998 files
No security note in commit
Informational 15 AI analysisMessage 35 · Opaque
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Adding codecov configuration file

This commit adds a configuration file for Codecov, a service that tracks how much of the project's code is covered by automated tests. It only tells Codecov which folders to ignore and how to label different kinds of test coverage. It does…

cd53dd96by Ilya Artemov+33−01 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Coverage for functional tests

This commit only adds a new GitHub Actions CI job that runs automated test coverage reports for the Bitcoin app. It does not change any application code, wallet logic, or security behavior. There is no user-facing or security-relevant chan…

6f96beffby Ilya Artemov+13−01 file
No security note in commit
Low 26 AI analysisMessage 68 · Adequate
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Refactor creation of static pairs struct

This commit is a defensive code cleanup in the user-interface layer of Ledger's Bitcoin app. It replaces repeated manual setup of a display data structure with a single helper function that always zeroes out any fields the caller does not …

Defensive refactor to ensure full zero-initialization of a shared UI structEliminates call sites that partially initialized `pairList`, which could leave stale fieldsOnly one field (`wrapping`) was previously set inconsistently across call sites; the helper now makes that explicit
2245761bby Salvatore Ingala+19−491 file
No security note in commit
Informational 12 AI analysisMessage 95 · Strong
LD LedgerLedger Bitcoin app BitcoinHardware wallets

cleartext: add BIP388 cleartext engine, codegen and CI check

This commit adds a new feature to the Ledger Bitcoin app that translates complex wallet policies into plain English for user review, plus a 'confusion score' to warn when a policy's description could match multiple different wallet setups.…

New feature code is present but not wired to any handler, so it is not reachable in the current build.No security bug, buffer overflow, or secret exposure is visible in the diff.Generated C code includes fixed-size arrays and bounds checks (CT_MAX_BINDINGS, CT_MAX_KEYEXPRS).
eab93592by Salvatore Ingala+4398−214 files
No security note in commit
Informational 12 AI analysisMessage 60 · Adequate
LD LedgerLedger Bitcoin app BitcoinHardware wallets

cleartext: add unit tests for the cleartext engine

This commit only adds new unit tests for an existing 'cleartext' feature in the Ledger Bitcoin app. It does not change any production code, fix a bug, or alter app behavior. The tests check how wallet descriptors are rendered into human-re…

178e2a43by Salvatore Ingala+273−02 files
No security note in commit
Informational 22 AI analysisMessage 83 · Strong
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Show cleartext representation of wallet policy, when possible

This commit changes how Ledger devices display Bitcoin wallet policies during setup. Instead of always showing the raw technical descriptor, it tries to show a human-readable summary ("cleartext") of the spending rules. For simple multisig…

UI confirmation flow modified for wallet policy registrationRaw descriptor template hidden for simple multisig policiesNew dependency on cleartext classification/confusion-score engine
f883a913by Salvatore Ingala+146−147 files
No security note in commit
Informational 15 AI analysisMessage 38 · Opaque
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Update test snapshots

This commit only updates test snapshot images (screenshots used for automated visual testing) for the Ledger Bitcoin app. No application source code, firmware logic, or user-facing behavior was changed. It is a routine test-maintenance upd…

a606e745by Salvatore Ingala+0−0229 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
LD LedgerLedger Bitcoin app BitcoinHardware wallets

Update CHANGELOG for cleartext feature

This commit only updates the changelog text. It documents a user-experience improvement that shows wallet policies in plain English on the Ledger device screen. There is no code change and no security fix or vulnerability present in the di…

c4974b73by Salvatore Ingala+1−01 file
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this