What changed, and why it matters
This is a routine build-system maintenance change. It adds the libffi library to the list of packages installed in a FreeBSD CI workflow so that the Python coincurve package can compile successfully. There is no security-relevant change to the software itself.
No security action required. Treat as normal build/CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies .github/workflows/bsd.yml to install libffi alongside other build dependencies on FreeBSD CI runners. libffi is a foreign function interface library commonly required as a transitive build dependency for Python packages such as coincurve (which wraps libsecp256k1). The change is purely additive to the CI environment and does not alter Core Lightning’s runtime code, dependencies shipped to users, or any security-sensitive logic.
Changed components
.github/workflows/bsd.ymlInspect captured patch +2 / −1
diff --git a/.github/workflows/bsd.yml b/.github/workflows/bsd.yml
index 8fcb9c8c..eee34d93 100644
--- a/.github/workflows/bsd.yml
+++ b/.github/workflows/bsd.yml
@@ -45,7 +45,8 @@ jobs:
jq \
protobuf \
curl \
- uv
+ uv \
+ libffi
python3.10 -m ensurepip
python3.10 -m pip install --upgrade pip
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.