ER
← All projectselectrs

electrs

Rust Electrum server that indexes Bitcoin Core data for wallet queries.

BitcoinIndexing infrastructureSoftware walletsNormal
Repository coverage

65 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

0security candidates41second-pass queue5AI analyses
5commits · 30 days
9commits · 60 days
24commits · 180 days
64commits · 365 days
Backfill bands
Aug 5 → Feb 641 seen0 candidatesComplete
Feb 6 → Jun 615 seen0 candidatesComplete
Jun 6 → Jul 64 seen0 candidatesComplete
Jul 6 → Aug 55 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

61/100 average clarity
2Strong · 80–100
35Adequate · 60–79
18Thin · 40–59
10Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
dependabot[bot]2801076
Roman Zeyde2203041
Rej Ect200061
Antoni Spaanderman200056
Martin Habovstiak100068
MozirDmitriy100058
Olexandr88100036
Snezhkko100070
Torkel Rogstad101078
vastonus100085
yancy100060
Yuki Kishimoto100076
Analysis record

Published AI watches

Last scanned 43 minutes ago

Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update documentation for the upcoming release

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory i…

9cd09afaby Roman Zeyde+62−1176 files
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump log from 0.4.29 to 0.4.33

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in t…

9175b0f9by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update bitcoind release in CI

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no …

eed01b98by Roman Zeyde+4−41 file
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Require latest bitcoind

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

c0a4b3faby Roman Zeyde+1−11 file
No security note in commit
Informational 21 AI analysisMessage 78 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

multi: expose configurable magic on non-signet

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P netw…

New configuration option exposes network magic override beyond signetLarge repository import obscures the precise code changeNo validation or bounds checking on the magic value is visible in the diff
d846cc75by Torkel Rogstad+12271−074 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedBump log from 0.4.27 to 0.4.28 (#1228)by dependabot[bot] · 0a8d9b21 · Sep 13, 2025 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump log from 0.4.27 to 0.4.28 (#1228)

Bumps [log](https://github.com/rust-lang/log) from 0.4.27 to 0.4.28.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/log/compare/0.4.27...0.4.28)

---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.28
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump ctrlc from 3.4.2 to 3.5.0 (#1229)by dependabot[bot] · cd339c60 · Sep 13, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump ctrlc from 3.4.2 to 3.5.0 (#1229)

Bumps [ctrlc](https://github.com/Detegr/rust-ctrlc) from 3.4.2 to 3.5.0.
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](https://github.com/Detegr/rust-ctrlc/commits)

---
updated-dependencies:
- dependency-name: ctrlc
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-priorityfix: outdated comment jsonrpc_timeout is for RPC calls, not wait_for_new_block (#1227)by Snezhkko · 7eaa2a45 · Sep 7, 2025 · 1 fileMessage 70 · AdequateTriage 0Details
Commit message · Snezhkko

fix: outdated comment jsonrpc_timeout is for RPC calls, not wait_for_new_block (#1227)

70/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
AI review queuedFix CI after bumping `bitcoin` dependency (#1226)by Roman Zeyde · 01bde1c5 · Sep 6, 2025 · 1 fileMessage 53 · ThinTriage 0Details
Commit message · Roman Zeyde

Fix CI after bumping `bitcoin` dependency (#1226)

53/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Why it was queued
second-pass: broader security terminology
AI review queuedBump `bitcoin` dependency to 0.32.7by Roman Zeyde · 96a3b7c4 · Sep 6, 2025 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Roman Zeyde

Bump `bitcoin` dependency to 0.32.7

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: broader security terminology
Lower-priorityUpdate `prometheus` to 0.14.0 (#1225)by Roman Zeyde · bdb1691d · Sep 6, 2025 · 2 filesMessage 53 · ThinTriage 0Details
Commit message · Roman Zeyde

Update `prometheus` to 0.14.0 (#1225)

53/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
AI review queuedBump serde_json from 1.0.109 to 1.0.143 (#1223)by dependabot[bot] · 639e87b0 · Sep 6, 2025 · 1 fileMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump serde_json from 1.0.109 to 1.0.143 (#1223)

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.109 to 1.0.143.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.109...v1.0.143)

---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.143
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump tempfile from 3.20.0 to 3.21.0 (#1222)by dependabot[bot] · f210ead3 · Sep 6, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump tempfile from 3.20.0 to 3.21.0 (#1222)

Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)

---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-prioritycache cf handles in DBStore::write (#1220)by Antoni Spaanderman · 4a5af616 · Aug 30, 2025 · 1 fileMessage 53 · ThinTriage 0Details
Commit message · Antoni Spaanderman

cache cf handles in DBStore::write (#1220)

53/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Lower-priorityAdd missing semicolon in drop_last_headers function (#1218)by MozirDmitriy · 53ecda43 · Aug 25, 2025 · 1 fileMessage 58 · ThinTriage 0Details
Commit message · MozirDmitriy

Add missing semicolon in drop_last_headers function (#1218)

58/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Lower-priorityupdate serde to the latest version after the precompiled library got removed (#1217)by Antoni Spaanderman · 744ae18b · Aug 24, 2025 · 2 filesMessage 58 · ThinTriage 0Details
Commit message · Antoni Spaanderman

update serde to the latest version after the precompiled library got removed (#1217)

58/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
AI review queuedBump rayon from 1.10.0 to 1.11.0 (#1215)by dependabot[bot] · 3ab7eb4f · Aug 22, 2025 · 2 filesMessage 76 · AdequateTriage 0Details
Commit message · dependabot[bot]

Bump rayon from 1.10.0 to 1.11.0 (#1215)

Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.10.0 to 1.11.0.
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.10.0...rayon-core-v1.11.0)

---
updated-dependencies:
- dependency-name: rayon
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Lower-priorityBump MSRV to 1.85 & update RocksDB to 9.10.0by Roman Zeyde · 55c8e772 · Aug 14, 2025 · 10 filesMessage 60 · AdequateTriage 0Details
Commit message · Roman Zeyde

Bump MSRV to 1.85 & update RocksDB to 9.10.0

Support Debian 13 (trixie) / Ubuntu 25.04 (plucky).

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Lower-priorityci: bump actions/checkout to v5 (#1211)by Rej Ect · c86204f7 · Aug 12, 2025 · 1 fileMessage 65 · AdequateTriage 0Details
Commit message · Rej Ect

ci: bump actions/checkout to v5 (#1211)

65/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Why it was queued
documentation-only discount
AI review queuedUpdate TODO.md (#1208)by Galoretka · 8e1cf184 · Aug 5, 2025 · 1 fileMessage 16 · OpaqueTriage 0Details
Commit message · Galoretka

Update TODO.md (#1208)

16/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body! Contains work-in-progress language
Why it was queued
documentation-only discountsecond-pass: opaque commit message