CommitWatch RSS
ER
← All projectselectrs

electrs

Rust Electrum server that indexes Bitcoin Core data for wallet queries.

BitcoinIndexing infrastructureSoftware walletsNormal
Source repository ↗
Repository coverage

65 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

0security candidates41second-pass queue5AI analyses
5commits · 30 days
9commits · 60 days
24commits · 180 days
64commits · 365 days
Backfill bands
Aug 5 → Feb 641 seen0 candidatesComplete
Feb 6 → Jun 615 seen0 candidatesComplete
Jun 6 → Jul 64 seen0 candidatesComplete
Jul 6 → Aug 55 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

61/100 average clarity
2Strong · 80–100
35Adequate · 60–79
18Thin · 40–59
10Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
dependabot[bot]2801076
Roman Zeyde2203041
Rej Ect200061
Antoni Spaanderman200056
Martin Habovstiak100068
MozirDmitriy100058
Olexandr88100036
Snezhkko100070
Torkel Rogstad101078
vastonus100085
yancy100060
Yuki Kishimoto100076
Analysis record

Published AI watches

Last scanned 0 minutes ago

Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update documentation for the upcoming release

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory i…

9cd09afaby Roman Zeyde+62−1176 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump log from 0.4.29 to 0.4.33

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in t…

9175b0f9by dependabot[bot]+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update bitcoind release in CI

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no …

eed01b98by Roman Zeyde+4−41 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Require latest bitcoind

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

c0a4b3faby Roman Zeyde+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 21 AI analysisMessage 78 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

multi: expose configurable magic on non-signet

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P netw…

New configuration option exposes network magic override beyond signetLarge repository import obscures the precise code changeNo validation or bounds checking on the magic value is visible in the diff
d846cc75by Torkel Rogstad+12271−074 files
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityUpdate documentation for the upcoming releaseby Roman Zeyde · 9cd09afa · Jul 18, 2026 · 6 filesMessage 45 · ThinInformational 15Details
Commit message · Roman Zeyde

Update documentation for the upcoming release

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory in server.sh from ./_db to ./db. There is no code change that fixes or introduces a security vulnerability.

AI review queuedBump log from 0.4.29 to 0.4.33by dependabot[bot] · 9175b0f9 · Jul 18, 2026 · 1 fileMessage 76 · AdequateInformational 15Details
Commit message · dependabot[bot]

Bump log from 0.4.29 to 0.4.33

Bumps [log](https://github.com/rust-lang/log) from 0.4.29 to 0.4.33.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/log/compare/0.4.29...0.4.33)

---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.33
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI analysis · Informational 15/100

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit of any security fix or vulnerability being addressed, and the `log` crate is a widely-used, stable logging utility. This appears to be a routine maintenance patch with no direct security relevance.

Lower-priorityUpdate bitcoind release in CIby Roman Zeyde · eed01b98 · Jul 18, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Roman Zeyde

Update bitcoind release in CI

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no direct security fix or code change to the electrs software itself.

AI review queuedRequire latest bitcoindby Roman Zeyde · c0a4b3fa · Jul 18, 2026 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · Roman Zeyde

Require latest bitcoind

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI analysis · Informational 15/100

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

AI review queuedmulti: expose configurable magic on non-signetby Torkel Rogstad · d846cc75 · Dec 24, 2025 · 74 filesMessage 78 · AdequateInformational 21Details
Commit message · Torkel Rogstad

multi: expose configurable magic on non-signet

There's no point in limiting this option to signet only. Allowing this
flag to be set outside of signet networks lets electrs be used for
custom testing networks that aren't signets.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: unusually broad changesecond-pass: security-sensitive path
AI analysis · Informational 21/100

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P network 'magic' bytes on networks other than signet. Previously this option was restricted to signet. The change is intended to support custom testing networks. There is no direct evidence in the commit of a security vulnerability, but it slightly increases the chance of misconfiguration when connecting to custom or test networks.