What the developer wrote
Authored by Julian
update epiccash again
What changed, and why it matters
This commit simply updates the version of an external library called 'epiccash' used by the Stack Wallet app. It changes which exact code snapshot and prebuilt download the app will use, but the commit message gives no details about why the update was made or whether it fixes any security problem. Without seeing the actual changes inside the epiccash library, we cannot tell if this is a routine update or a security patch.
Review the upstream flutter_libepiccash changelog or commit history between dcb285b30ac4a91285a6aa4536ce24630b406d3c and 920ac94cf5295df3c3ae083c6a23ff602fb0f068 to determine whether this update addresses security issues. Verify the SHA-256 of the new prebuilt manifest matches the published release artifact.
Security signals we found
Dependency version bump for flutter_libepiccash
Prebuilt manifest URL and SHA-256 updated to native-0.3.0
No commit-level description of security relevance
No diff content showing the actual upstream code changes
Evidence from the diff
The diff updates the Git reference for flutter_libepiccash from dcb285b30ac4a91285a6aa4536ce24630b406d3c to 920ac94cf5295df3c3ae083c6a23ff602fb0f068 in both pubspec.lock and a template file. It also bumps the prebuilt manifest from native-0.2.0 to native-0.3.0 and updates the corresponding SHA-256 hash. The commit itself does not contain any source-code changes to Stack Wallet, only dependency pins. No information is provided about what changed in the upstream library.
Changed components
flutter_libepiccash dependencypubspec.lockscripts/app_config/templates/pubspec.template.yamlInspect captured patch +5 / −5
diff --git a/pubspec.lock b/pubspec.lock
index 367ec0b..3154cf6 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -1021,8 +1021,8 @@ packages:
dependency: "direct main"
description:
path: "."
- ref: dcb285b30ac4a91285a6aa4536ce24630b406d3c
- resolved-ref: dcb285b30ac4a91285a6aa4536ce24630b406d3c
+ ref: "920ac94cf5295df3c3ae083c6a23ff602fb0f068"
+ resolved-ref: "920ac94cf5295df3c3ae083c6a23ff602fb0f068"
url: "https://github.com/cypherstack/flutter_libepiccash.git"
source: git
version: "0.0.1"
diff --git a/scripts/app_config/templates/pubspec.template.yaml b/scripts/app_config/templates/pubspec.template.yaml
index 40a01c6..89fa4f4 100644
--- a/scripts/app_config/templates/pubspec.template.yaml
+++ b/scripts/app_config/templates/pubspec.template.yaml
@@ -53,7 +53,7 @@ dependencies:
# flutter_libepiccash:
# git:
# url: https://github.com/cypherstack/flutter_libepiccash.git
-# ref: dcb285b30ac4a91285a6aa4536ce24630b406d3c
+# ref: 920ac94cf5295df3c3ae083c6a23ff602fb0f068
# %%END_ENABLE_EPIC%%
# %%ENABLE_MWC%%
@@ -375,8 +375,8 @@ dependency_overrides:
# user_defines:
# flutter_libepiccash:
# native_build: prebuilt
-# prebuilt_manifest_url: "https://github.com/cypherstack/flutter_libepiccash/releases/download/native-0.2.0/manifest.json"
-# prebuilt_manifest_sha256: "e46451e60cacae2c622681854c44d76a9f37c4c5eb9aff8fa28483464afafde1"
+# prebuilt_manifest_url: "https://github.com/cypherstack/flutter_libepiccash/releases/download/native-0.3.0/manifest.json"
+# prebuilt_manifest_sha256: "19be31940f7a58af98f315032d13c0a7c43a45bbcc86847587a6d1593985603a"
# flutter_libmwc:
# native_build: prebuilt
# prebuilt_manifest_url: "https://github.com/cypherstack/flutter_libmwc/releases/download/native-0.1.0-1/manifest.json"
Why this scored 25/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.