Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
17490Commits captured
17117AI analyses
88High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17117 analyses
Highest risk·RSS
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated API snapshot files that record which types and functions are publicly visible in the library. No actual source code was changed, and nothing in the commit fixes or introduces a security problem. It is a r…

e49c6b95by Mitchell Bagot+223−454 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Move error types to error submodules

This commit is a routine code reorganization. It moves existing error types into new 'error' submodules and re-exports them in the same way the project does elsewhere. No behavior changes, no bug fixes, and no security implications are vis…

17c4b76bby Mitchell Bagot+41−223 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated API snapshot files to reflect that a new `extend` method was added to the `Witness` type. The actual code change happened elsewhere, and these files are just machine-generated documentation of the public …

7153746eby Mitchell Bagot+8−02 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add Extend impl to Witness

This commit adds a standard Rust trait implementation (Extend) to the Witness type, allowing users to append multiple witness elements at once. It is a routine API completeness change with no security relevance.

8f47aff7by Mitchell Bagot+13−01 file
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add Debug impl to witness::Iter

This commit simply adds a standard Debug printing implementation to a public iterator type in a Rust Bitcoin library. It is a routine API-quality improvement with no security relevance.

986967f4by Mitchell Bagot+5−13 files
No security note in commit
Informational 15 AI analysisMessage 73 · Adequate
SS SeedSignerSeedSigner BitcoinHardware wallets

Merge pull request #603 from fedebuyito/resolves_issue_555

This commit is a large merge pull request titled 'Resolves issue 555 - Improve UX navigating across DEL button (expanding it)'. The supplied diff shows only additions of project documentation, build workflows, Docker files, images, and tem…

No security-relevant code changes present in supplied diffNo modifications to cryptographic, wallet, QR, or seed-handling logicNo input validation, parsing, or privilege changes visible
01a8dc38by Nick Klockenga+135192−0332 files
No security note in commit
Informational 15 AI analysisMessage 40 · Thin
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

feat: modify Lace Wallet

This commit is a routine user-interface update for the Lace wallet integration. It moves the Lace wallet icon into the 'Bitcoin Wallets' submenu, removes a separate Lace entry that previously showed both Bitcoin and Cardano support, and no…

468209b6by soralit+4−81 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

hashes: bump version to 1.1.0

This commit is a routine version bump for the bitcoin_hashes crate from 1.0.0 to 1.1.0. It updates dependency references across the workspace, records the release in the changelog, and adjusts deprecation lint allowances in tests. There is…

bf3f25f4by Nick Johnson+34−269 files
No security note in commit
Low 47 AI analysisMessage 58 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Make Witness FromIterator infallible

This commit fixes a bug in how a Bitcoin data type called Witness is built from lists of byte slices. The previous code reused a decoder that has built-in denial-of-service limits, which could cause valid-looking witness lists to fail cons…

Removal of expect() panic path in infallible trait implementationDoS protection limits in decoder no longer applied during FromIterator constructionUse of infallible from_slice constructor instead of fallible decoder
d3c9d3a1by Mitchell Bagot+4−271 file
Vendor flagged security relevance
Informational 15 AI analysisMessage 68 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Use DebugTuple for Builder debug

This commit fixes a minor Rust API guideline compliance issue in how a script builder object is printed for debugging. It changes the debug output so that an empty builder prints 'Builder()' instead of an empty string. There is no security…

350c583dby Mitchell Bagot+3−11 file
No security note in commit
Informational 15 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core/ethereum): add trSHETHp vault

This commit adds metadata for a new Ethereum yield vault called 'Trezor Steakhouse ETH Prime Vault' so that Trezor devices can display a friendly name and token details when users interact with it. It is a product feature addition, not a s…

8a1adadaby obrusvit+21−02 files
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this