CommitWatch RSS
SW
← All projectsSparrow

Sparrow Wallet

Desktop Bitcoin wallet focused on security, privacy, multisignature, and hardware signers.

BitcoinHardware integrationSoftware walletsNormal
Source repository ↗
Repository coverage

281 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

50security candidates174second-pass queue175AI analyses
46commits · 30 days
53commits · 60 days
181commits · 180 days
281commits · 365 days
Backfill bands
Aug 5 → Feb 6100 seen9 candidatesComplete
Feb 6 → Jun 6128 seen15 candidatesComplete
Jun 6 → Jul 67 seen1 candidatesComplete
Jul 6 → Aug 546 seen8 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

46/100 average clarity
0Strong · 80–100
20Adequate · 60–79
212Thin · 40–59
49Opaque · 0–39
2security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Craig Raw26846167546
doblon8312048
Michele Balistreri211048
nroktib111050
nzb-tuxxx111060
Liz Lightning201045
PeterXMR101045
Ian McKenzie100050
ottosch101050
craigraw100060
Analysis record

Published AI watches

Last scanned 59 minutes ago

Low 48 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

avoid deleting the backups of same-prefixed wallets

This commit fixes a bug in how Sparrow Wallet finds and deletes old wallet backups. Previously, the backup cleanup logic used loose pattern matching that could accidentally treat backups of one wallet as if they belonged to another wallet …

Incorrect backup selection could lead to deletion of another wallet's backup filesLoose filename prefix matching allowed same-prefixed wallet names to collideDate extraction regex accepted extra trailing characters, broadening matches
b6ed4ba7by Craig Raw+55−302 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 62 AI analysisMessage 60 · Adequate
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

verify proof of work on chain tips and warn when a tip goes stale

This commit adds safety checks to the Bitcoin wallet Sparrow when it receives block-chain tip announcements from an Electrum server. It now verifies that the announced block header is properly formatted, not timestamped too far in the futu…

Adds proof-of-work verification on server-announced chain tipsAdds future-timestamp rejection for announced chain tipsAdds staleness warning when no new mainnet tip is received for >2 hours
5ccc4902by Craig Raw+180−55 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 66 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

prevent a password change from re-encrypting wallets whose filenames share the same prefix

This commit fixes a bug in Sparrow Wallet's password-change feature. Previously, when a user changed the password on a wallet file whose name was a prefix of another wallet file (for example, 'Savings' and 'Savings.old'), the underlying H2…

Unintended re-encryption of sibling wallet files due to prefix matching in H2 ChangeFileEncryptionPotential wallet corruption or loss of access when changing a wallet passwordUse of isolated temporary directory to prevent cross-wallet file operations
24c6202eby Craig Raw+153−103 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 56 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

reject truncated and oversized tlv lengths when parsing keycard responses

This commit fixes a bug in how Sparrow Wallet reads data from Keycard hardware wallets. Previously, the code trusted the length declared inside a card response without checking whether that many bytes actually exist. A malicious or malfunc…

Out-of-bounds read / buffer over-read in TLV length parsingTruncated and oversized length values previously acceptedPotential memory-safety issue leading to zero-padded fabricated data
b0b9cc23by Craig Raw+160−52 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

reject extended private keys when creating a terminal watch only wallet, and show import errors

This commit fixes a bug in Sparrow Wallet's terminal (command-line) watch-only wallet creation. Previously, a user could accidentally paste an extended private key (xprv) into a dialog meant only for public keys or output descriptors, and …

Prevents accidental import of extended private keys into watch-only wallet contextSurfaces previously swallowed import errors to the user via error dialogChanges exception handling from ImportException-only to all exceptions
fa0d4841by Craig Raw+19−152 files
No security note in commit
Open full analysis →Source commit ↗
Low 49 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

ensure imported keystore labels are truncated and unique

This commit fixes a bug in Sparrow Wallet's import of wallet labels. Previously, labels for multi-signature participants (keystores) could be too long or identical to each other, which could make the wallet file impossible to reopen. The c…

Denial-of-service via malformed imported label causing wallet file to become unopenableInput validation added for imported keystore labelsLength truncation and uniqueness enforcement for keystore labels
7a3f775aby Craig Raw+17−61 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 61 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

always check and restrict existing wallets and backup directories to owner only permissions

This update makes Sparrow Wallet automatically tighten the file permissions on wallet and backup folders so only the computer's owner can read them. Previously, if those folders already existed with looser permissions (for example, created…

Permission hardening for sensitive wallet storage directoriesNew setOwnerOnlyDirectory helper enforcing rwx------ on existing directoriesBackup directory permissions now always restricted on startup
5d387765by Craig Raw+35−01 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Low 25 AI analysisMessage 45 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add bitbox02 attestation failed dialog

This commit adds a user-facing warning dialog when a BitBox02 hardware wallet fails an attestation check. Attestation is a process that helps verify the device is genuine and not a counterfeit or tampered unit. Previously, a failed attesta…

Adds explicit user warning for failed hardware wallet attestationPrevents repeated warning dialogs during device enumeration using AtomicBooleanWarns user not to store funds on potentially counterfeit device
1a810c06by Craig Raw+16−12 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 56 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve validation of payjoin proposals, and accept a substituted payment output where a change output is present

This commit strengthens how Sparrow Wallet checks Payjoin proposals received from a payment receiver. Payjoin lets a receiver add their own inputs to a transaction to improve privacy. The changes add missing checks that could previously le…

Added minimum fee-rate enforcement on Payjoin proposalsAdded Taproot (P2TR) key-path and derived-public-key validation and propagationRestricted payment-output substitution to proposals that retain a change output
32f7e58fby Craig Raw+250−233 files
No security note in commit
Open full analysis →Source commit ↗
Low 46 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve validation of legacy multipart qr part numbers

This commit tightens how Sparrow Wallet handles multi-part QR codes used to import older wallet data. It limits part numbers to four digits and rejects impossible values (like part 0 of 0, or part 5 of 2). The change prevents the app from …

Input validation added to QR multipart parserRegex quantifier tightened from unbounded to {1,4}Bounds check prevents m > n and zero/negative counts
059f1e88by Craig Raw+10−62 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 65 · Adequate
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

remove unused signature verification results in satochip and keycard signers, note where signatures are verified

This commit removes leftover code that checked whether signatures from hardware card signers were valid, but then threw away the result. The signatures are still verified later by a different part of the wallet when the signed transaction …

Removal of local signature verification calls in hardware signer code pathsAdded comments documenting that signature verification occurs later via PSBT.verifyCombinedSignatures()Unused boolean results indicate the removed checks were dead code rather than active security controls
866e9893by Craig Raw+5−132 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 60 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve validation of bip129, descriptor and unchained wallet imports

This commit hardens how Sparrow Wallet imports wallet files from other tools. It adds checks that reject malformed or inconsistent imports—such as a multisig setup that says it needs 3 signers but only provides 2 keys, or a coordinator fil…

Added wallet.checkWallet() validation after descriptor, BSMS, Caravan and terminal wallet creationBIP129 first-address verification prevents coordinator from supplying different keys to each signerBIP129 path restriction enforcement limits derivation to standard receive/change chains
3752540eby Craig Raw+469−429 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 60 · Adequate
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

only save certificates passing hostname verification as ca validated, and retain not yet valid certificates

This commit tightens how Sparrow Wallet saves and reuses TLS certificates for private servers. Previously, any certificate that passed a basic CA check was saved as 'CA validated' even if it didn't actually match the server's hostname. Tha…

Missing hostname verification before saving CA-trusted certificateBroad exception handling previously caused deletion of saved certificates on any CertificateExceptionCertificate pinning/trust-store logic for private Electrum servers
372ebf2fby Craig Raw+38−61 file
No security note in commit
Open full analysis →Source commit ↗
Low 28 AI analysisMessage 35 · Opaque
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

remove ineffective eckey clear

This commit removes several calls that tried to wipe private-key material from memory. The developer says these wipes were 'ineffective' because the underlying ECKey object still held the secret bytes. The change is a cleanup, but it sligh…

Removal of explicit private-key zeroization callsCommit message labels prior zeroization as ineffectivePrivate key material remains referenced longer after use
1636c7e2by Craig Raw+2−1911 files
No security note in commit
Open full analysis →Source commit ↗
High 72 AI analysisMessage 55 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

verify fetched transactions match requested txid

This commit adds checks to make sure that when Sparrow Wallet asks an Electrum server for a specific Bitcoin transaction, the server actually returns the transaction that was requested. Before this change, a malicious or buggy server could…

Missing input validation on server-provided transaction dataPotential transaction substitution by malicious or compromised Electrum serverDefense-in-depth verification added at data deserialization boundary
3979694eby Craig Raw+100−163 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 28 · Opaque
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

rotate era logos

This commit simply rotates four logo images by 90 degrees. It changes only SVG graphics files and does not touch any code, cryptography, wallet logic, or network behavior. There is no security relevance.

2b9c3eb7by Craig Raw+4−44 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 38 · Opaque
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

bump to v2.5.4

This commit is a routine version bump from 2.5.3 to 2.5.4. It only changes version strings in four files: the build configuration, macOS packaging metadata, in-app version constant, and documentation for reproducible builds. There are no c…

ef2c2cdeby Craig Raw+4−44 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

treat whitespace-only labels as blank on label import and export

This commit tightens how Sparrow Wallet treats labels made only of spaces or tabs during wallet label import and export. Previously, a label consisting solely of whitespace was considered a real label; now it is treated as blank and skippe…

Behavioral hardening: whitespace-only strings now treated as absent labelsNo input validation bypass, memory safety, or cryptographic changes observedPotential minor UI/data-integrity issue mitigated, not a vulnerability
0dce4783by Craig Raw+10−92 files
No security note in commit
Open full analysis →Source commit ↗
Informational 19 AI analysisMessage 50 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add option to ignore dust on private key sweep

This commit adds a user-facing checkbox labeled 'Ignore dust' to the private-key sweep feature in Sparrow Wallet. When enabled, very small ('dust') unspent outputs linked to the swept key are excluded from the transaction. This is a usabil…

Adds user-controlled filtering of UTXOs by value thresholdUses existing 'dustAttackThreshold' configuration, implying prior anti-dust handling elsewhereNo input validation, cryptographic, or authorization changes
cf797ea0by nroktib+21−21 file
No security note in commit
Open full analysis →Source commit ↗
Informational 19 AI analysisMessage 45 · Thin
SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add opt-in xdg application directory support

This commit changes where Sparrow Wallet stores its files on macOS and Linux to optionally follow the XDG Base Directory Specification. It is a directory-layout migration, not a fix for a vulnerability. The change could create minor securi…

Directory migration logic with symlink creation and fallback search pathsInstance lock pointer now searched in both new XDG state home and legacy default homeNetwork directory rename logic creates/updates symlinks and may leave stale symlinks
2d667d11by Craig Raw+177−829 files
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedcheck wallet file names on openby Craig Raw · dac1a616 · Feb 12, 2026 · 2 filesMessage 45 · ThinModerate 56Details
Commit message · Craig Raw

check wallet file names on open

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Moderate 56/100

This commit tightens what characters are allowed in Sparrow wallet file names. It appears to block a way that a specially crafted wallet file name could inject extra commands into the H2 database connection string (JDBC URL), which might let an attacker who can get a user to open a maliciously named wallet file perform unexpected database operations. The patch is defensive and partial: it adds a blocklist for semicolon-prefixed parameters in the file name and also removes the semicolon from allowed characters when naming wallets.

AI review queuedavoid triggering repeated layout passes in address chunking skinsby Craig Raw · 227c7ae6 · Feb 11, 2026 · 3 filesMessage 50 · ThinInformational 19Details
Commit message · Craig Raw

avoid triggering repeated layout passes in address chunking skins

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit makes a small JavaFX UI tweak in three address-display components. It marks an internal 'TextFlow' layout node as 'unmanaged,' which stops it from participating in automatic layout calculations. The stated goal is to prevent repeated layout passes when addresses are shown in chunked groups. There is no indication this fixes a security vulnerability, and no exploit path is visible from the change.

AI review queuedbump to v2.4.1by Craig Raw · e11675b9 · Feb 10, 2026 · 4 filesMessage 38 · OpaqueInformational 15Details
Commit message · Craig Raw

bump to v2.4.1

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine version bump from 2.4.0 to 2.4.1 for the Sparrow Wallet application. It updates version strings in the build file, macOS app metadata, and the application's Java code, plus refreshes documentation about which Java version to use for reproducible builds. There are no code changes that affect wallet security, transaction handling, or user data.

AI review queuedimprove context menu item text fill on dark theme for default split menu buttonsby Craig Raw · 146e6cbd · Feb 9, 2026 · 7 filesMessage 50 · ThinInformational 15Details
Commit message · Craig Raw

improve context menu item text fill on dark theme for default split menu buttons

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a purely cosmetic fix for the Sparrow Wallet desktop application. It makes sure that when using the dark theme, the text on menu items attached to certain default-style buttons is colored white so it remains readable. There is no security issue here.

AI review queuedbump to v2.4.0by Craig Raw · e4fa0c93 · Feb 9, 2026 · 3 filesMessage 38 · OpaqueInformational 15Details
Commit message · Craig Raw

bump to v2.4.0

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine version bump from 2.3.2 to 2.4.0. It only changes three version number strings in build files and source code. There is no functional code change, no bug fix, and no security-related modification.

AI review queuedfinal address chunk contrast tweakingby Craig Raw · 30719c5a · Feb 9, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Craig Raw

final address chunk contrast tweaking

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a purely cosmetic tweak to the dark theme's color settings. It slightly darkens the alternate color used when Bitcoin addresses are displayed in chunks, improving visual contrast. There is no security relevance.

Security candidateremove extension-less file associations which are no longer supported by jpackageby Craig Raw · a120d08e · Feb 6, 2026 · 4 filesMessage 50 · ThinInformational 17Details
Commit message · Craig Raw

remove extension-less file associations which are no longer supported by jpackage

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
authentication path
AI analysis · Informational 17/100

This commit removes Sparrow Wallet's installer associations for handling 'bitcoin:', 'lightning:', and 'auth47:' web-style links. The change was made because the packaging tool (jpackage) no longer supports these extension-less file associations. This is a compatibility/build cleanup, not a security fix. A side effect is that after installing future Sparrow versions, clicking these link types in a browser may no longer automatically open Sparrow, depending on the platform and how the installer is configured.

AI review queuedadd workaround for jpackage issue where mime-info is not generated on linuxby Craig Raw · b51bd902 · Feb 6, 2026 · 2 filesMessage 50 · ThinInformational 15Details
Commit message · Craig Raw

add workaround for jpackage issue where mime-info is not generated on linux

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit adds a build-system workaround so that Linux installers for the Sparrow Wallet correctly register file types (like .psbt Bitcoin transaction files) and URI handlers (like bitcoin: payment links) with the desktop environment. It is a packaging fix, not a code change that affects wallet security or user funds.

AI review queuedreduce contrast on address chunksby Craig Raw · a765105d · Feb 6, 2026 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Craig Raw

reduce contrast on address chunks

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only changes the color contrast of alternating chunks of displayed Bitcoin addresses in the wallet's user interface. It makes some address segments slightly less visually distinct from surrounding text. There is no security-relevant change.

AI review queuedrespect configured bitcoin unit on transaction diagram and labelby Craig Raw · 2cd7d0bd · Feb 6, 2026 · 4 filesMessage 50 · ThinInformational 15Details
Commit message · Craig Raw

respect configured bitcoin unit on transaction diagram and label

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a straightforward user-interface improvement: it makes the transaction diagram and related labels display Bitcoin amounts in whatever unit the user has chosen (BTC or satoshis), instead of always showing satoshis. It also refreshes the diagram when the user changes the unit format. There is no security issue here.

AI review queuedfollowupby Craig Raw · c6c24028 · Feb 6, 2026 · 5 filesMessage 0 · OpaqueInformational 15Details
Commit message · Craig Raw

followup

0/100 · OpaqueMessage clarity
! Very short subject! Too few words to establish purpose! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a small UI follow-up change. It moves a visual styling marker from one container element (rootStack) to another (rootBox) so that a user preference—chunking Bitcoin addresses into colored groups—applies correctly across all windows, including ones opened after startup. There is no security-relevant behavior here.

AI review queuedadd view menu item to toggle address chunk display formattingby Craig Raw · efb81555 · Feb 5, 2026 · 5 filesMessage 50 · ThinInformational 15Details
Commit message · Craig Raw

add view menu item to toggle address chunk display formatting

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit adds a new user preference in the Sparrow Wallet View menu that lets users turn Bitcoin address chunking (visual grouping of address characters) on or off. It also moves the existing 'Hide Empty Used Addresses' option into a new 'Bitcoin Addresses' submenu. There is no security-relevant change here—only a cosmetic UI feature and menu reorganization.

AI review queuedformat display of addresses in tables only when the table is selectedby Craig Raw · b11afdf2 · Feb 5, 2026 · 2 filesMessage 50 · ThinInformational 15Details
Commit message · Craig Raw

format display of addresses in tables only when the table is selected

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a cosmetic CSS tweak for a Bitcoin wallet application. It changes when address text gets alternating color formatting: previously all address chunks were styled, now only those inside text fields, labels, or selected tree-table views get the alternate shading. There is no security relevance in this change.

Lower-priorityupdate readme to reflect java 25 requirementby Craig Raw · 779a55c4 · Feb 5, 2026 · 2 filesMessage 45 · ThinTriage 0Details
Commit message · Craig Raw

update readme to reflect java 25 requirement

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI review queuedfollowupby Craig Raw · b06d8587 · Feb 5, 2026 · 1 fileMessage 0 · OpaqueTriage 0Details
Commit message · Craig Raw

followup

0/100 · OpaqueMessage clarity
! Very short subject! Too few words to establish purpose! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
Lower-priorityclear tool cache, revert to setup-java action for reproducibilityby Craig Raw · 306c025c · Feb 5, 2026 · 1 fileMessage 50 · ThinTriage 0Details
Commit message · Craig Raw

clear tool cache, revert to setup-java action for reproducibility

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritycombine sdkman and setup-java actionsby Craig Raw · b145bddf · Feb 5, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Craig Raw

combine sdkman and setup-java actions

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI review queuedfollowup 2by Craig Raw · edee72d9 · Feb 5, 2026 · 1 fileMessage 0 · OpaqueTriage 0Details
Commit message · Craig Raw

followup 2

0/100 · OpaqueMessage clarity
! Very short subject! Too few words to establish purpose! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI review queuedfollowupby Craig Raw · b87650a7 · Feb 5, 2026 · 1 fileMessage 0 · OpaqueTriage 0Details
Commit message · Craig Raw

followup

0/100 · OpaqueMessage clarity
! Very short subject! Too few words to establish purpose! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
Lower-prioritydefine sdkmanrc and reference it in github actionby Craig Raw · 0c9bbc25 · Feb 5, 2026 · 2 filesMessage 45 · ThinTriage 0Details
Commit message · Craig Raw

define sdkmanrc and reference it in github action

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityupgrade kmp-tor to fix file deletion issue on windowsby Craig Raw · 088f8e30 · Feb 4, 2026 · 2 filesMessage 50 · ThinTriage 0Details
Commit message · Craig Raw

upgrade kmp-tor to fix file deletion issue on windows

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityfix file association exception on windowsby Craig Raw · 4309216a · Feb 4, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Craig Raw

fix file association exception on windows

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityremove warnings on gradle test taskby Craig Raw · dffaf806 · Feb 4, 2026 · 3 filesMessage 55 · ThinTriage 0Details
Commit message · Craig Raw

remove warnings on gradle test task

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Lower-priorityupgrade to java 25.0.2 and javafx 25.0.2by Craig Raw · 448067db · Feb 4, 2026 · 2 filesMessage 45 · ThinTriage 0Details
Commit message · Craig Raw

upgrade to java 25.0.2 and javafx 25.0.2

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI review queuedformat display of addresses in 4 character chunksby Craig Raw · 6b498c28 · Feb 3, 2026 · 18 filesMessage 45 · ThinInformational 18Details
Commit message · Craig Raw

format display of addresses in 4 character chunks

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 18/100

This commit changes how Bitcoin addresses are shown on screen in the Sparrow Wallet app. Instead of displaying one long continuous string, addresses are now split into 4-character chunks with alternating colors to make them easier to read and verify. It is a user-interface improvement, not a security fix or vulnerability.