Update wallet-core pin

MAGIC Grants/Skylight Wallet

6fc90e27 View source ↗

Public commit record

What the developer wrote

Authored by Keeqler

28/100 · Opaque

Update wallet-core pin

✓ Subject identifies a change! No meaningful explanatory body! Opaque security-relevant change

The short version

What changed, and why it matters

This commit only changes how the app pulls in its shared wallet library. It switches from a local folder reference to a pinned Git commit from the same project's online repository, and updates that pinned version to a newer commit. There is no visible code change in the app itself, and nothing in the commit message or diff indicates a security fix or vulnerability.

Recommended action

Review the corresponding wallet-core commit (68eae37137948d9e6e06004190b0a09f51a62451) to determine whether it contains security-relevant changes. This commit alone does not warrant a security response.

Security signals we found

Dependency source changed from local path to git pin

Wallet library pin updated to newer commit

Technical analysis

Evidence from the diff

The diff updates pubspec.yaml and pubspec.lock for a Flutter/Dart project. It changes wallet-core package dependencies from local path references (../wallet-core/…) to git references pinned to commit 68eae37137948d9e6e06004190b0a09f51a62451 on https://github.com/MAGICGrants/wallet-core. The previous git pin was 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f. No source code, logic, or configuration affecting security is modified in this repository.

Changed components

pubspec.yamlpubspec.lockwallet-core dependency pin

Inspect captured patch +42 / −28

### pubspec.lock
@@ -1232,51 +1232,65 @@ packages:
   wallet_background:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_background"
-      relative: true
-    source: path
+      path: "packages/wallet_background"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_domain:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_domain"
-      relative: true
-    source: path
+      path: "packages/wallet_domain"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_fiat:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_fiat"
-      relative: true
-    source: path
+      path: "packages/wallet_fiat"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_infra:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_infra"
-      relative: true
-    source: path
+      path: "packages/wallet_infra"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_monero:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_monero"
-      relative: true
-    source: path
+      path: "packages/wallet_monero"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_openalias:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_openalias"
-      relative: true
-    source: path
+      path: "packages/wallet_openalias"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   wallet_ui:
     dependency: "direct main"
     description:
-      path: "../wallet-core/packages/wallet_ui"
-      relative: true
-    source: path
+      path: "packages/wallet_ui"
+      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      url: "https://github.com/MAGICGrants/wallet-core"
+    source: git
     version: "0.1.0"
   web:
     dependency: transitive

### pubspec.yaml
@@ -65,37 +65,37 @@ dependencies:
   wallet_infra:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_infra
   wallet_domain:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_domain
   wallet_monero:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_monero
   wallet_openalias:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_openalias
   wallet_background:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_background
   wallet_fiat:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_fiat
   wallet_ui:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 6860cbd8eaca4c2e1f9b1487ec8292592fdc205f
+      ref: 68eae37137948d9e6e06004190b0a09f51a62451
       path: packages/wallet_ui
 
   bip39:

Risk score

Why this scored 4/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 2/10

Evidence quality 2/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 4/100

Community notes

Related watches

Merge pull request #178 from MAGICGrants/2.1.0-release-fixes

Update pins

Merge branch 'main' into 2.1.0-release-fixes