CommitWatch RSS
ER
← All projectselectrs

electrs

Rust Electrum server that indexes Bitcoin Core data for wallet queries.

BitcoinIndexing infrastructureSoftware walletsNormal
Source repository ↗
Repository coverage

65 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

0security candidates41second-pass queue5AI analyses
5commits · 30 days
9commits · 60 days
24commits · 180 days
64commits · 365 days
Backfill bands
Aug 5 → Feb 641 seen0 candidatesComplete
Feb 6 → Jun 615 seen0 candidatesComplete
Jun 6 → Jul 64 seen0 candidatesComplete
Jul 6 → Aug 55 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

61/100 average clarity
2Strong · 80–100
35Adequate · 60–79
18Thin · 40–59
10Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
dependabot[bot]2801076
Roman Zeyde2203041
Rej Ect200061
Antoni Spaanderman200056
Martin Habovstiak100068
MozirDmitriy100058
Olexandr88100036
Snezhkko100070
Torkel Rogstad101078
vastonus100085
yancy100060
Yuki Kishimoto100076
Analysis record

Published AI watches

Last scanned 43 minutes ago

Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update documentation for the upcoming release

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory i…

9cd09afaby Roman Zeyde+62−1176 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump log from 0.4.29 to 0.4.33

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in t…

9175b0f9by dependabot[bot]+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update bitcoind release in CI

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no …

eed01b98by Roman Zeyde+4−41 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Require latest bitcoind

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

c0a4b3faby Roman Zeyde+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 21 AI analysisMessage 78 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

multi: expose configurable magic on non-signet

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P netw…

New configuration option exposes network magic override beyond signetLarge repository import obscures the precise code changeNo validation or bounds checking on the magic value is visible in the diff
d846cc75by Torkel Rogstad+12271−074 files
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityUndo `Cargo.lock` version bumpby Roman Zeyde · 24ed1437 · Jan 19, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Roman Zeyde

Undo `Cargo.lock` version bump

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI review queuedBump serde_json from 1.0.148 to 1.0.149by dependabot[bot] · e693d703 · Jan 13, 2026 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump serde_json from 1.0.148 to 1.0.149

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.148 to 1.0.149.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.148...v1.0.149)

---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.149
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump signal-hook from 0.3.18 to 0.4.1by dependabot[bot] · 28a2c459 · Jan 3, 2026 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump signal-hook from 0.3.18 to 0.4.1

Bumps [signal-hook](https://github.com/vorner/signal-hook) from 0.3.18 to 0.4.1.
- [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/signal-hook/compare/v0.3.18...v0.4.1)

---
updated-dependencies:
- dependency-name: signal-hook
dependency-version: 0.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-priorityAdd signet support for contrib/history.pyby Roman Zeyde · 44aee140 · Jan 3, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Roman Zeyde

Add signet support for contrib/history.py

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI review queuedBump tempfile from 3.23.0 to 3.24.0by dependabot[bot] · e7595479 · Jan 2, 2026 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump tempfile from 3.23.0 to 3.24.0

Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.23.0 to 3.24.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.23.0...v3.24.0)

---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump serde_json from 1.0.146 to 1.0.148by dependabot[bot] · 4d421cc1 · Jan 2, 2026 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump serde_json from 1.0.146 to 1.0.148

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.146 to 1.0.148.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.146...v1.0.148)

---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.148
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-priorityDisable warning on `configure_me_config.rs`by Roman Zeyde · b562e8c2 · Dec 28, 2025 · 2 filesMessage 45 · ThinTriage 0Details
Commit message · Roman Zeyde

Disable warning on `configure_me_config.rs`

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI review queuedSimplify network magic parsingby Roman Zeyde · a80f0f71 · Dec 27, 2025 · 1 fileMessage 35 · OpaqueTriage 0Details
Commit message · Roman Zeyde

Simplify network magic parsing

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI review queuedmulti: expose configurable magic on non-signetby Torkel Rogstad · d846cc75 · Dec 24, 2025 · 74 filesMessage 78 · AdequateInformational 21Details
Commit message · Torkel Rogstad

multi: expose configurable magic on non-signet

There's no point in limiting this option to signet only. Allowing this
flag to be set outside of signet networks lets electrs be used for
custom testing networks that aren't signets.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: unusually broad changesecond-pass: security-sensitive path
AI analysis · Informational 21/100

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P network 'magic' bytes on networks other than signet. Previously this option was restricted to signet. The change is intended to support custom testing networks. There is no direct evidence in the commit of a security vulnerability, but it slightly increases the chance of misconfiguration when connecting to custom or test networks.

AI review queuedBump ctrlc from 3.5.0 to 3.5.1by dependabot[bot] · 6ff91501 · Dec 23, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump ctrlc from 3.5.0 to 3.5.1

Bumps [ctrlc](https://github.com/Detegr/rust-ctrlc) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](https://github.com/Detegr/rust-ctrlc/compare/3.5.0...3.5.1)

---
updated-dependencies:
- dependency-name: ctrlc
dependency-version: 3.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump serde_json from 1.0.145 to 1.0.146by dependabot[bot] · d7d3a836 · Dec 23, 2025 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump serde_json from 1.0.145 to 1.0.146

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.145 to 1.0.146.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.145...v1.0.146)

---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.146
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump log from 0.4.28 to 0.4.29by dependabot[bot] · 66b6efb5 · Dec 23, 2025 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump log from 0.4.28 to 0.4.29

Bumps [log](https://github.com/rust-lang/log) from 0.4.28 to 0.4.29.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/log/compare/0.4.28...0.4.29)

---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.29
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump bitcoin from 0.32.7 to 0.32.8by dependabot[bot] · 30c019f3 · Dec 13, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump bitcoin from 0.32.7 to 0.32.8

Bumps [bitcoin](https://github.com/rust-bitcoin/rust-bitcoin) from 0.32.7 to 0.32.8.
- [Release notes](https://github.com/rust-bitcoin/rust-bitcoin/releases)
- [Changelog](https://github.com/rust-bitcoin/rust-bitcoin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-bitcoin/rust-bitcoin/compare/bitcoin-0.32.7...bitcoin-0.32.8)

---
updated-dependencies:
- dependency-name: bitcoin
dependency-version: 0.32.8
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-priorityCI: migrate workflows to checkout v6by Rej Ect · 1af066be · Nov 24, 2025 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Rej Ect

CI: migrate workflows to checkout v6

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI review queuedRelease 0.11.0by Roman Zeyde · 800bebee · Nov 15, 2025 · 3 filesMessage 28 · OpaqueTriage 0Details
Commit message · Roman Zeyde

Release 0.11.0

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI review queuedUpdate release notesby Roman Zeyde · 39413a80 · Nov 15, 2025 · 1 fileMessage 28 · OpaqueTriage 0Details
Commit message · Roman Zeyde

Update release notes

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
Lower-prioritySupport 'blockchain.transaction.broadcast_package' with verbose=falseby Roman Zeyde · f2c23f55 · Nov 15, 2025 · 1 fileMessage 50 · ThinTriage 0Details
Commit message · Roman Zeyde

Support 'blockchain.transaction.broadcast_package' with verbose=false

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritySupport 'blockchain.transaction.broadcast_package'by Roman Zeyde · cd6d8f7c · Nov 14, 2025 · 2 filesMessage 40 · ThinTriage 0Details
Commit message · Roman Zeyde

Support 'blockchain.transaction.broadcast_package'

40/100 · ThinMessage clarity
✓ Specific, descriptive subject! No meaningful explanatory body
Lower-priorityAdd testnet4 branch to contrib history scriptby yancy · d5b7a4ff · Nov 11, 2025 · 1 fileMessage 60 · AdequateTriage 0Details
Commit message · yancy

Add testnet4 branch to contrib history script

Testnet4 uses a different default electrum port than testnet.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Lower-priorityAllow 'unused-attributes' lint for nowby Roman Zeyde · b118cbb0 · Nov 11, 2025 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Roman Zeyde

Allow 'unused-attributes' lint for now

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritychore: fix some minor issues in the comments (#1235)by vastonus · 0d749dba · Oct 27, 2025 · 2 filesMessage 85 · StrongTriage 0Details
Commit message · vastonus

chore: fix some minor issues in the comments (#1235)

Signed-off-by: vastonus <vastonus@outlook.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI review queuedUpdate README.md (#1234)by Olexandr88 · a2a47e8c · Oct 7, 2025 · 1 fileMessage 36 · OpaqueTriage 0Details
Commit message · Olexandr88

Update README.md (#1234)

36/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI review queuedBump tempfile from 3.22.0 to 3.23.0 (#1233)by dependabot[bot] · bd2a8874 · Oct 2, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump tempfile from 3.22.0 to 3.23.0 (#1233)

Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.22.0 to 3.23.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.22.0...v3.23.0)

---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump tempfile from 3.21.0 to 3.22.0 (#1231)by dependabot[bot] · 6d9fc298 · Sep 15, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump tempfile from 3.21.0 to 3.22.0 (#1231)

Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0)

---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump serde_json from 1.0.143 to 1.0.145 (#1232)by dependabot[bot] · a11e00f6 · Sep 15, 2025 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump serde_json from 1.0.143 to 1.0.145 (#1232)

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.143 to 1.0.145.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.143...v1.0.145)

---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.145
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology