RB
← All projectsRust Bitcoin

rust-bitcoin

Rust library for Bitcoin data structures, serialization, consensus encoding, and scripts.

BitcoinCryptographic librariesNormal
Repository coverage

2097 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

463security candidates455second-pass queue2081AI analyses
185commits · 30 days
390commits · 60 days
1288commits · 180 days
2055commits · 365 days
Backfill bands
Aug 5 → Feb 6787 seen32 candidatesComplete
Feb 6 → Jun 6878 seen53 candidatesComplete
Jun 6 → Jul 6211 seen15 candidatesComplete
Jul 6 → Aug 5184 seen2 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

64/100 average clarity
330Strong · 80–100
1058Adequate · 60–79
558Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Mitchell Bagot643192641068
Tobin C. Harding41366410063
jrakibi944994068
Andrew Poelstra692360080
Nick Johnson19020189060
Jamil Lambert, PhD11418114061
Fmt Bot321431045
Trevor Arjeski111111069
Shing Him Ng31731056
Ismail Daif22622050
satsfy (Renato Britto)17617066
Martin Habovstiak27527069
Analysis record

Published AI watches

Last scanned 26 minutes ago

Informational 18 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6690: consensus_encoding: expose lower level encoder/decoder interfaces

This commit is a routine library refactor: it exposes lower-level building blocks for encoding and decoding lists of Bitcoin data, and rewrites existing list encoders/decoders to use those new building blocks. There is no direct security f…

Refactor only: no new parsing rules or relaxed boundsExisting MAX_VEC_SIZE limit retained in VecDecoderWithNo mention of security, CVE, advisory, or vulnerability in commit message or PR description
76aac6eaby Andrew Poelstra+917−17311 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6713: build(deps): bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0

This is a routine update to a GitHub Actions workflow that bumps the version of a helper tool called cargo-binstall from 1.19.1 to 1.20.0. The tool is only used during automated version-compatibility checks in CI and is not part of the act…

617302d3by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6714: build(deps): bump taiki-e/install-action from 2.81.4 to 2.81.10

This is a routine Dependabot update that changes the version of a third-party GitHub Action used only in automated testing workflows. It does not touch the actual Bitcoin library code, user-facing APIs, or any shipped software. There is no…

e8250092by Andrew Poelstra+2−22 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6592: primitives: Update API test

This commit only updates an internal test file (primitives/tests/api.rs) that checks whether public types implement expected Rust traits and are exported correctly. It adds coverage for new types introduced in earlier development and reorg…

0969e567by Andrew Poelstra+322−461 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6694: units: Flatten Error Constructors

This commit is a code cleanup that rewrites how error values are constructed in the Rust Bitcoin library. It changes nested constructor calls like Err(OuterError(InnerError { ... })) into a flatter style using map_err. There is no function…

622ab209by Andrew Poelstra+58−546 files
No security note in commit
Informational 20 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6678: units: Add `Weight::to_vb_*` functions, deprecating `to_vbytes_*`

This is a routine API cleanup in a Rust Bitcoin library. It adds new method names (to_vb_floor, to_vb_ceil) for converting transaction 'weight' to 'virtual bytes' and marks the old names (to_vbytes_floor, to_vbytes_ceil) as deprecated. The…

7f614781by Andrew Poelstra+30−86 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6597: Release tracking PR: `crypto 0.3.0`

This commit is a routine release-tracking merge. It only bumps version numbers (bitcoin-crypto to 0.3.0 and bitcoin-primitives to 0.103.1), updates dependency version requirements, refreshes lock files, and adds changelog entries. There ar…

1fddd49eby Andrew Poelstra+34−1210 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated API listing files (text snapshots of public functions) to reflect a newly added public function, `to_consensus_u32`, on the `CompactTarget` type. It does not change any source code, logic, or behavior, an…

a75c53c8by Mitchell Bagot+6−03 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6675: units: Remove unnecessary track_caller

This commit removes two Rust compiler hints (`#[track_caller]`) from helper functions that simply return a value or call a user-provided fallback. These functions never panic, so the hints were unnecessary and had no security effect. The c…

ce894f36by Andrew Poelstra+0−21 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6644: primitives: Add serde impls for `WitnessVersion`

This commit adds standard serialization/deserialization support for the WitnessVersion type when the optional serde feature is enabled. It is a routine feature addition with no security relevance visible in the code or commit message.

4981faa7by Andrew Poelstra+50−02 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6671: units: reword docs from height to count in relative locktime

This commit only changes documentation comments and variable names in the rust-bitcoin library. It rewords references to 'block height' as 'block count' for relative locktime, because a relative locktime measures elapsed blocks since a coi…

6ea4ff92by Andrew Poelstra+20−172 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6670: ci: fix labeller permissions

This is a routine GitHub Actions workflow fix. The change gives the automated PR labeler workflow permission to download artifacts and explicitly tells the GitHub CLI which repository to act on. It does not change the Bitcoin library code,…

CI workflow permission fixNo source code changesNo cryptographic or consensus changes
276e0a61by Andrew Poelstra+5−01 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6657: Release tracking PR: `base58ck 0.5.0`

This commit is a routine version bump for the base58ck crate from 0.4.0 to 0.5.0. It only updates version numbers in package manifests, lock files, and adds a changelog entry. There are no code changes and no security relevance.

9deb5de1by Andrew Poelstra+22−168 files
No security note in commit
Informational 21 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6440: base58: Introduce `decode_check_to_array` for alloc-less decoding

This commit is a routine feature addition to the rust-bitcoin base58 crate. It adds a new no-allocator function to decode short base58-check strings into fixed-size byte arrays, and renames the existing error type while keeping a deprecate…

No security-relevant bug fix is described in the commit message or diff.New decoding path uses a fixed 128-byte scratch buffer (`ArrayVec`) and rejects oversized inputs.Checksum verification and invalid-character handling are preserved from the existing alloc implementation.
c5fd1832by Andrew Poelstra+330−775 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6646: hashes: add several methods to `Midstate` and release 1.2.0

This commit is a routine feature release for the bitcoin_hashes crate. It adds new public methods and a constant to the SHA-256 Midstate type so developers can compute SHA-256 midstates in const contexts. There is no indication of a securi…

0f68fcb3by Andrew Poelstra+157−4210 files
No security note in commit
Informational 15 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

units: reword docs to block count in relative locktime

This commit only rewords documentation comments and variable names in the codebase. It changes references from 'block height' to 'block count' for relative lock times, which is a terminology correction with no functional code changes. Ther…

8867fe2eby satsfy (Renato Britto)+20−172 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6667: Make the `WitnessesEncoder` private

This commit makes a small internal helper type called WitnessesEncoder private. It was previously exported as public API but is only used inside the transaction encoder. The change removes it from the public API surface and moves the code …

07d91f7fby Andrew Poelstra+54−1324 files
No security note in commit
Informational 12 AI analysisMessage 75 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

ci: fix labeller permissions

This commit adjusts a GitHub Actions workflow that automatically labels pull requests based on CI results. It adds a built-in repository token, tells the artifact download step to merge single-file artifacts, and explicitly sets the reposi…

Workflow-only change with no library code modificationsUses the default GITHUB_TOKEN rather than a custom secretRuns in workflow_run context, which already has elevated repository access by design
715f2bd6by Nick Johnson+5−01 file
No security note in commit
Informational 19 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6661: units: Remove `From<u16>` from `NumberOfBlocks`

This is a routine API cleanup, not a security fix. The developers removed a shortcut that let programmers create a 'number of blocks' value directly from any u16 number, replacing it with an existing named constructor called from_height. T…

ed5f1b68by Andrew Poelstra+18−358 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6668: Scrub the transaction encoding logic

This commit is a pure code reorganization (refactor) in the rust-bitcoin library. It moves transaction encoding and decoding definitions around within a single file so the code follows the project's preferred layout. No logic, behavior, or…

c5588ba5by Andrew Poelstra+57−571 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Security candidateprimitives: split WitnessScript and WitnessScriptBuf from scriptby Andrew Poelstra · 683d55ba · Aug 22, 2025 · 18 filesMessage 73 · AdequateInformational 19Details
Commit message · Andrew Poelstra

primitives: split WitnessScript and WitnessScriptBuf from script

Ok, after the previous huge/ugly commits, this one is pretty cathartic.
I introduced the new type, used it for every field named `witness_script`
and all the constructors for `WScriptHash`, chased through all the
compiler bugs, and everything "just worked".

There is one oddity: in BIP143 there is a special-cased scriptcode construction
used for P2SH-wrapped segwit. We have methods that compute this. To make the
types line up (without introducing new traits and generics) I simply typed
the special-case thing as a WitnessScript, since that's what it's pretending
to be. I added a doccomment to all the methods that compute this.

This is a mild abuse of the `WitnessScript` type, since this special-case
object really isn't a witness script (though you could use it as one, and
trick wallets in mostly-harmless ways by doing so ... but this is a bug
in Bitcoin, not in our library!). But only a mild one, and I think it does
a *way* better job of guiding the user through the script-mangling weirdness
around sighashes and p2sh/p2wsh wrapping.

The final tag is TapScript, which will be done in the next commit. Then I
can throw away the Whatever tag, delete `Script`/`ScriptBuf`, and finally
rename `GenericScript`/`GenericScriptBuf` to those names.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 19/100

This commit is a large internal refactoring in the rust-bitcoin library. It introduces a new dedicated type, WitnessScript, for Segwit v0 witness scripts and uses it wherever the code previously used the generic Script type for that purpose. The change is primarily about making the type system guide users to the correct Bitcoin concepts. The commit message explicitly notes one deliberate design oddity: for BIP143 P2SH-wrapped-segwit sighash calculations, the returned object is typed as WitnessScript even though it is technically a special-case template, not a real witness script. The author calls this a 'mild abuse' and documents it. There is no bug fix for a runtime vulnerability in the diff; the security relevance is that stronger typing may help prevent future API misuse.

Security candidatebitcoin: move hex and PSBT decoding from ScriptBufExt to GenericScriptBufExtby Andrew Poelstra · 865ca2cb · Aug 22, 2025 · 10 filesMessage 65 · AdequateInformational 15Details
Commit message · Andrew Poelstra

bitcoin: move hex and PSBT decoding from ScriptBufExt to GenericScriptBufExt

These things apply to all script buffer types and belong in the generic
trait.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
signing boundarycryptography-sensitive pathsigning or wallet path
AI analysis · Informational 15/100

This is a routine internal code reorganization in the rust-bitcoin library. It moves hex decoding and PSBT serialization helpers from a trait that only applied to the standard script buffer into a more generic trait so the same helpers work with all script buffer types. There is no security fix or behavior change visible in the diff.

Security candidateprimitives: split RedeemScript and RedeemScriptBuf from scriptby Andrew Poelstra · abf93a45 · Aug 22, 2025 · 18 filesMessage 83 · StrongLow 29Details
Commit message · Andrew Poelstra

primitives: split RedeemScript and RedeemScriptBuf from script

There were multiple places in bitcoin/src/blockdata/script/tests.rs
where we were being sloppy and reinterpreting redeem scripts as
witness scripts and vice-versa. I am happy to say these no longer
compile :).

This completes the hard part of script tagging -- we still need to
add WitnessScript and TapScript, but these are part of "modern"
Bitcoin and therefore aren't randomly cast to/from other script types.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Low 29/100

This commit is a code-quality and type-safety refactor in the rust-bitcoin library. It introduces a dedicated RedeemScript type so that P2SH redeem scripts can no longer be accidentally confused with other script types (such as witness scripts). The change makes several previously-allowed unsafe conversions fail at compile time, which helps prevent future bugs rather than fixing an active vulnerability.

Security candidateprimitives: split ScriptSig and ScriptSigBuf from Script and ScriptBufby Andrew Poelstra · 3e55c526 · Aug 22, 2025 · 24 filesMessage 91 · StrongInformational 18Details
Commit message · Andrew Poelstra

primitives: split ScriptSig and ScriptSigBuf from Script and ScriptBuf

Adds an extension trait ScriptSigExt with a single method, redeem_script,
which isn't used anywhere (or even tested) but seems useful enough so
we'll keep it.

Regarding extension traits: annoyingly I need to add a new extension trait
for every tagged script. In a sensible language I could just use the
existing trait and stick `where Tag == ScriptSigTag` onto the methods
that were specific to script sigs, but Rust is not sensible. It has a
fractal surface area where there is no part of the syntax that you can
ever understand all the rules of.

Anyway there is an 11-year-old tracking issue for this
https://github.com/rust-lang/rust/issues/20041

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 18/100

This commit is a routine internal refactoring in the rust-bitcoin library. It introduces separate types for transaction input scripts (scriptSig) and other scripts, moving some helper methods between extension traits. There is no indication it fixes a security bug or changes behavior in a way that would create a vulnerability.

Security candidateprimitives: split ScriptPubKey and ScriptPubKeyBuf from generic scriptby Andrew Poelstra · c89e70e8 · Aug 22, 2025 · 32 filesMessage 85 · StrongInformational 19Details
Commit message · Andrew Poelstra

primitives: split ScriptPubKey and ScriptPubKeyBuf from generic script

There are a couple places where (in Bitcoin, not just this crate) there
is confusion between scriptPubKeys and redeemScripts. Specifically, in
P2SH-wrapped segwit, we put a segwit scriptpubkey into a redeemScript
slot and then it must be treated as both.

The next commit will introduce the RedeemScript type and a trait that
covers both RedeemScript and ScriptPubKey.

Meanwhile, there are a couple methods that belong in this trait, which
in this commit I just implemented for GenericScript<T> for all T:

* in bitcoin/src/crypto/sighash.rs all the sighash methods
* in primitives/src/script/mod.rs the ScriptHash constructors
* in bitcoin/src/script/mod.rs for new_witness_program_unchecked
* in bitcoin/src/script/borrowed.rs for all the p2sh methods
* in bitcoin/src/script/owned.rs for the new_p2wpkh constructor

In the next commit we will tighten these so that they are only applicable
to the two types RedeemScript and ScriptPubKey. (Really, we want to
tighten them so that they're applicable only to RedeemScript and some
more-specific SegwitV0ScriptPubKey type. But I think that would be a
bridge too far: if we had multiple scriptpubkey types then what would
we put in TxOut::script_pubkey?)

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 19/100

This commit is a large internal refactoring in the rust-bitcoin library. It introduces a new dedicated type, ScriptPubKey, for the scripts that appear in transaction outputs, and updates many examples and internal functions to use it. The change is described by the author as a step toward preventing confusion between scriptPubKeys and redeemScripts. It is not a security patch for an exploitable bug; it is a type-system cleanup that may reduce future misuse but does not by itself fix any vulnerability.

Security candidatebitcoin: make script::Builder genericby Andrew Poelstra · e51b5c30 · Aug 22, 2025 · 10 filesMessage 68 · AdequateInformational 18Details
Commit message · Andrew Poelstra

bitcoin: make script::Builder generic

Required updating the extension trait macro to add generics, and splitting
out some methods on the Script/ScriptBuf extension traits into new
GenericScript / GenericScriptBuf extension traits.

I did not do this in a principled way; I just moved the minimum set of
functions I needed to make the generic script builder compile.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This commit is a routine internal refactoring of the Rust Bitcoin library. It makes the script-building code generic so it can work with different script type tags, but does not change what the code actually does. There is no indication this fixes a security bug or introduces a vulnerability.

Lower-prioritybitcoin: use generic script in script::instructionsby Andrew Poelstra · 5890bf65 · Aug 22, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Andrew Poelstra

bitcoin: use generic script in script::instructions

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small internal refactoring change in the Rust Bitcoin library. It switches the script-instruction parsing code from using a concrete Script type to a generic GenericScript type. There is no visible security fix or behavior change; it appears to be part of a larger type-system cleanup.

Lower-priorityput generics onto GenericScript and GenericScriptBufby Andrew Poelstra · 21514e0c · Aug 22, 2025 · 5 filesMessage 85 · StrongInformational 15Details
Commit message · Andrew Poelstra

put generics onto GenericScript and GenericScriptBuf

...still no visible API changes outside primitives, because outside primitives
we are using Script/ScriptBuf (which are secretly GenericScript{,Buf}<Whatever>)
which are unchanged.

In the following commits we will start using GenericScript{,Buf} directly for
generic script methods, and then start defining new specific script types.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a purely internal refactoring of the Rust Bitcoin library's script types. It adds a generic type parameter to the existing GenericScript and GenericScriptBuf types so that future commits can distinguish different kinds of Bitcoin scripts (for example, redeem scripts versus witness scripts). The public-facing Script and ScriptBuf type aliases are unchanged, so ordinary users of the library should not notice any difference. There is no security fix or vulnerability here.

Lower-prioritydefine_extension_trait: allow 'where T: Bound' and `where T = Type` clauses on methodsby Andrew Poelstra · 582b6edc · Aug 22, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Andrew Poelstra

define_extension_trait: allow 'where T: Bound' and `where T = Type` clauses on methods

Later in this PR we are going to gate some script methods on a subtrait of their tag.
In particular, there are some methods related to sighash computation and P2SH-wrapped
segwit which require us to treat redeem scripts and witness scripts as similar things,
even though they will be different types.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a small, internal change to a Rust macro that generates extension traits. It simply allows the macro to accept method signatures that include 'where' clauses (a Rust language feature for adding type constraints). There is no change to user-facing behavior, no bug fix, and no security relevance.

Lower-priorityprimitives: rename Script{Buf,} to GenericScript{Buf,}by Andrew Poelstra · b03fcdcc · Aug 22, 2025 · 3 filesMessage 95 · StrongInformational 15Details
Commit message · Andrew Poelstra

primitives: rename Script{Buf,} to GenericScript{Buf,}

...and add type aliases to the old names so that the change is invisible
outside of primitives.

Done by search-and-replace on the three files in the script/ tree, and then
reversing the search-and-replace on the tests module and the stuff related
to scripthashes. (In the next commit we will add generics to these types,
and we will want our tests and API test to continue using specific types.
Changing them to be generic would be a lot of noise, and premature. For
the script hashes, there are specific types these should be implemented
on; we don't want them to be generic even if it were possible in a nice
way.)

At the end of this PR we will undo this rename. But we want to be sure that
every single instance of `Script` and `ScriptBuf` are replaced by a more
specific type, and by using these names for `GenericScript<Whatever>`, a
"specific type" that we'll delete at the end of the PR, we can identify
all of them.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a purely internal rename in the rust-bitcoin library. It renames the low-level `Script` and `ScriptBuf` types to `GenericScript` and `GenericScriptBuf`, then adds public type aliases so existing code using the old names continues to work unchanged. It is part of a planned refactoring series and does not change any behavior, logic, or security properties.

Lower-prioritydefine_extension_trait: allow impls on generic typesby Andrew Poelstra · ba447604 · Aug 22, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Andrew Poelstra

define_extension_trait: allow impls on generic types

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small Rust macro change that makes an internal helper macro able to define extension traits for generic types, not just plain types. It adds optional generic type parameters to the macro pattern. There is no security-relevant change visible in the diff.

Security candidaterun cargo fmtby Andrew Poelstra · 65747aa0 · Aug 22, 2025 · 6 filesMessage 28 · OpaqueInformational 15Details
Commit message · Andrew Poelstra

run cargo fmt

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body! Opaque security-relevant change
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 15/100

This commit is purely a code-formatting cleanup. It runs the Rust formatter (cargo fmt) across six files, changing only whitespace, line breaks, and import order. No program logic, security behavior, or functionality was altered.

AI review queuedUpdate message_network.rsby Alvarez · ee067e02 · Aug 22, 2025 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · Alvarez

Update message_network.rs

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit is a trivial typo fix: it renames a local variable from 'delimeter' to 'delimiter' with no functional change. The code behavior is identical before and after.

Security candidateFix SerializedSignature iteration stack overflowby Casey Rodarmor · 65b1c7ea · Aug 21, 2025 · 1 fileMessage 50 · ThinLow 44Details
Commit message · Casey Rodarmor

Fix SerializedSignature iteration stack overflow

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Names security-relevant behavior explicitly! No meaningful explanatory body
Why it was queued
signing boundarymemory safetycryptography-sensitive path
AI analysis · Low 44/100

This commit fixes a programming bug where iterating over a serialized ECDSA signature would cause the program to call itself forever, eventually crashing with a stack overflow. The fix changes one line so the iterator uses the actual byte data instead of accidentally re-entering the same function. A new test was added to confirm iteration now works correctly.

Lower-priorityManually print InvalidChecksum errorby Tobin C. Harding · cde47363 · Aug 21, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Tobin C. Harding

Manually print InvalidChecksum error

Currently the `ParseError` is a mess. The correct fix is likely to use
an associated type in `Decodable` for the error but that can wait.

Right now we are using `hex` in the `Display` impl for `ParseError`.
This will cause trouble when we move the error type to
`consenus_encoding` because `hex` is a feature.

Just manually print hex characters by accessing the array. Logic is
already tested with a static string, this patch does not change the
output.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a small internal code cleanup in the rust-bitcoin library. It changes how an error message about checksum mismatches is formatted, removing a dependency on a feature-flagged helper so the error type can be moved later. The visible output of the error message is unchanged. There is no security issue here.

Lower-priorityAdd regression tests for Display of ParseErrorby Tobin C. Harding · d1e430b8 · Aug 21, 2025 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Add regression tests for Display of ParseError

Done in preparation for patching the `Display` impl of `ParseError` to
manually print hex.

Add a regression test.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit only adds new unit tests that check how a checksum error message is displayed to users. It does not change any production code, fix a bug, or alter behavior. There is no security issue in this commit itself.

Lower-priorityDo trivial import clean upby Tobin C. Harding · 4341857e · Aug 21, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Tobin C. Harding

Do trivial import clean up

Refactor only, no logic changes.

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a pure code cleanup that only changes how internal Rust imports are organized. It removes some import lines and combines others, but does not change any program logic, data handling, or behavior. There is no security relevance.

AI review queuedAdd dependency policy docby Tobin C. Harding · d51a597a · Aug 21, 2025 · 1 fileMessage 66 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Add dependency policy doc

Add a document for evaluating dependencies vs NIH'ing functionality.
Content pulled out of

https://github.com/rust-bitcoin/rust-bitcoin/discussions/1243

66/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discountsecond-pass: broader security terminology
AI analysis · Informational 15/100

This commit adds a new documentation file (docs/dependencies.md) describing the project's policy for deciding whether to add third-party dependencies. It contains no code changes, no configuration changes, and no security fixes. It is purely a policy/governance document pulled from an earlier team discussion.

Security candidatebuild(deps): bump actions/checkout from 4 to 5by dependabot[bot] · 5d3428d1 · Aug 21, 2025 · 14 filesMessage 88 · StrongInformational 15Details
Commit message · dependabot[bot]

build(deps): bump actions/checkout from 4 to 5

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

88/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
boot or update pathdocumentation-only discountautomated dependency-update discount
AI analysis · Informational 15/100

This is a routine dependency update by Dependabot that changes the GitHub Actions 'checkout' action from version 4 to version 5 across all project workflow files. There is no indication of a security fix or vulnerability in the commit itself, and no source code affecting the Rust Bitcoin library was changed.

Lower-priorityprimitives: Add Tobin to the authors listby Tobin C. Harding · dde51fbc · Aug 20, 2025 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Tobin C. Harding

primitives: Add Tobin to the authors list

I/we have been directly or indirectly working on the `primitives`
crate for at least two years. Shortly (TM) we will be doing the first
`v1.0` RC release. Take accountability for it and add my name to the
authors list.

"Code is a liability not an asset"

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply adds a second person's name to the author list in a package metadata file. It changes no code, no dependencies, no build settings, and no runtime behavior. There is no security relevance.

AI review queuedchore: fix typosby ANtutov · 1ccf331b · Aug 20, 2025 · 2 filesMessage 40 · ThinInformational 15Details
Commit message · ANtutov

chore: fix typos

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes two spelling mistakes in code comments and documentation links. One corrects a grammatical phrase about Bitcoin block version bits, and the other fixes a typo in a hyperlink label pointing to Bitcoin Core's source code. There are no code behavior changes.

Security candidatefix: add all optional feature dependenciesby Nick Johnson · d39a8ac4 · Aug 19, 2025 · 1 fileMessage 90 · StrongInformational 15Details
Commit message · Nick Johnson

fix: add all optional feature dependencies

Ensure all optional feature dependencies are tested when creating the
lock files. rust-bitcoin's dependency tree is so lean right now though,
this is currently a no-op.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a small change to an internal maintenance script used to generate dependency lock files for testing. It adds the '--all-features' flag so that optional features are included when checking the project against minimal and recent dependency versions. The commit message explicitly says this is currently a no-op because rust-bitcoin has very few optional dependencies. There is no indication this fixes a security vulnerability.

Security candidatefix: build Cargo-minimal.lock with min depsby Nick Johnson · 328937a5 · Aug 19, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · Nick Johnson

fix: build Cargo-minimal.lock with min deps

Instead of letting minimal versions potentially drift upwards, reset
the Cargo-minimal.lock file each time dependencies are updated. The
new script uses a combination of the `direct-minimal-version` and
`minimal-versions` flags to ensure the minimal version dependency
tree is tested.

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit is a routine build-maintenance change. It tightens how the project tests against the oldest allowed versions of its dependencies, and refreshes a checked-in lock file so those oldest versions are actually used in CI. There is no product bug fix, no change to the library code users run, and no security issue being patched.

Lower-priorityfix: upgrade deps for min version checksby Nick Johnson · b75fa0be · Aug 19, 2025 · 7 filesMessage 100 · StrongInformational 15Details
Commit message · Nick Johnson

fix: upgrade deps for min version checks

* Standardizing the minimal versions of `serde_json` and `serde_test` in
the workspace. This allows the unstable "direct-minimal-versions" flag
of cargo to be used since it requires one minimal version in a
workspace. Since these are all dev dependencies (including the fuzz
crate) there shouldn't be any change for external consumers.
* arrayvec needs a small bump due to its version in hex.
* Arbitrary 1.4.0 does not work with the current 1.63.0 MSRV due to some
core::error usage.
* Update serde's contraint to the minimum version which the
workspace has been using due to implicit upgrades. Attempts were first
made to see if 1.0.103 could be used, but at the very least, would
require a fair amount of lint settings to be overridden due to the old
code. 1.0.195 is used because it also irons out an issue where old
versions of serde pulled in old proc_macro2 versions which use a nightly
feature, `proc_macro_span_shrink`, that has been dropped.

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit only updates the minimum required versions of development and optional third-party dependencies (like serde, arbitrary, arrayvec, and serde_json) across workspace Cargo.toml files and the minimal lockfile. It does not change any application code, cryptographic logic, or network handling. The stated purpose is to make the project's automated minimum-version checks work reliably with newer Cargo tooling, not to fix a security vulnerability.

Lower-prioritydocs: Add rustdocs link policy sectionby Tobin C. Harding · 168cf283 · Aug 19, 2025 · 1 fileMessage 88 · StrongInformational 15Details
Commit message · Tobin C. Harding

docs: Add rustdocs link policy section

With comment

https://github.com/rust-bitcoin/rust-bitcoin/issues/4859#issuecomment-3190333850

we decided to favour links at the bottom of a docs section instead of
inline.

Document this policy.

88/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds a documentation policy guideline about how to format hyperlink references in Rust source-code comments. It does not change any executable code, cryptographic logic, network handling, or APIs.