Ecosystem metrics

New Repos
18
down 28.0%
Commits
977
up 18.4%
Releases
10
up 42.9%
Contributors
59
up 25.5%
Merges
16
down 30.4%

Repository Explorer

10640 commits in all time May 15, 2026 16:18 – Aug 13, 2026 16:18 UTC
meetthosar devportal
Merge c3713684b64f284cdb29187f263cb719a558dcea into 3373832646a00d4285576642c42c4776cbf71f24
Git Commit 769677a1 Branch pull/641/merge Document 7/97 ++ 39 --
chore(release): [skip ci] Liquid Client
# [1.0.0-canary.10](https://github.com/algorandfoundation/liquid-auth-js/compare/v1.0.0-canary.9...v1.0.0-canary.10) (2026-08-13)

### Bug Fixes

* security patches ([4cfb56f](https://github.com/algorandfoundation/liquid-auth-js/commit/4cfb56f1969d6efabb9fe99f41eb0399e093196c))
Git Commit 763efb0d Branch main Document 3/10 ++ 3 --
PhearZero wallet-provider
Merge 7fdd08948797fd0e5517f8e7ed0ec0ed65d7fa22 into ed58280f6b67388d3ce7a2e81c9673aa1c7b6ee2
Git Commit 7a7f6df2 Branch pull/4/merge Document 29/5,172 ++ 2,548 --
chore(release): Wallet Provider
# [1.0.0-canary.6](https://github.com/algorandfoundation/wallet-provider/compare/v1.0.0-canary.5...v1.0.0-canary.6) (2026-08-13)

### Bug Fixes

* security patches ([c651236](https://github.com/algorandfoundation/wallet-provider/commit/c65123669e74371cce17387ce6ae4308800164b0))
Git Commit 7fdd0894 Branch main Document 2/8 ++ 1 --
PhearZero liquid-auth
Merge a003a0fddcb3032e4b1a5a3c32bf82612096a43a into 5202ec1658b5d9d2171c375d30504b3bdce5534d
Git Commit fd601c43 Branch pull/67/merge Document 7/1,009 ++ 875 --
PhearZero liquid-auth
fix: security patches
Git Commit a003a0fd Branch chore/harden-existing-links Document 2/495 ++ 865 --
github-actions[bot] wallet
cicd deploy 1.2026.08.13-main [skip ci]
Git Commit 1cf2b2eb Branch master Document 1/1 ++ 1 --
scholtz-aures wallet
Deploying to gh-pages from @ scholtz/wallet@36221a6a676cbe663c6ebe0fec41b8dae927ee1a 🚀
Git Commit 0641bad9 Branch gh-pages Document 9/15 ++ 15 --
scholtz-aures wallet
feat: Update workflow to allow optional Docker Hub tag input and resolve latest main tag if not provided
Git Commit 36221a6a Branch master Document 1/25 ++ 3 --
PhearZero nodekit
Merge 57e157e42ce6de54825a07dfe0b00b20d98203c1 into c64f88aab5aeeb5cfed35723d480ba8ca832be0d
Git Commit d9e976a0 Branch pull/187/merge Document 2/155 ++ 152 --
PhearZero nodekit
fix: bump dependencies
Git Commit 57e157e4 Branch chore/security-fixes Document 2/155 ++ 152 --
meetthosar devportal
docs: add AppSizeSponsor app field for AVM v13
Git Commit c3713684 Branch feat/allow-epp-schema-change Document 2/15 ++ 14 --
Merge 06bd3b8216abfccdbde129d2235a148d9430f673 into d2de6fadecafa220eaa47dbd00ea1221fc6af26f
Git Commit b87b2720 Branch pull/165/merge Document 83/12,754 ++ 12,224 --
meetthosar devportal
docs: add size-changing example to application update transaction
Git Commit c5049b58 Branch feat/allow-epp-schema-change Document 1/28 ++ 1 --
Refuse to sign a release whose tag and version disagree (#25)
sdk/pyproject.toml declared version = "0.1.0" while the repo carries tags
v0.2.0 and v0.2.1 - and both of those tags ALSO carry "0.1.0". Two independent
claims about which release this is, with nothing binding them.

The first real run of this workflow would therefore have built
trelyan_pq-0.1.0-*.whl, then SLSA-attested and Sigstore-signed those exact
bytes under a v0.2.2 tag. The attestation would have been cryptographically
valid and described the wrong release - which is worse than an unsigned
artifact, because it carries an assurance nobody can act on.

Nothing was published: release.yml was first committed 2026-06-18, AFTER both
tags (it is absent at v0.2.0 and v0.2.1), it has never run, and both GitHub
Releases have zero assets. The mislabelling was latent.

Bumps the declared version to 0.2.2 - verified by building: the wheel is now
trelyan_pq-0.2.2-py3-none-any.whl, previously it would have been 0.1.0 - and
adds a gate in the build job, before anything is compiled or signed, that
fails when the tag does not match. Simulated all three ways: v0.2.2 allowed,
v0.2.1 and v9.9.9 blocked.

Security impact: no crypto or protocol change. Closes a path where a signed,
SLSA-attested artifact could name a different release than its tag.
Git Commit c1e451f3 Branch main Document 2/23 ++ 1 --
meetthosar devportal
docs: note extra program pages can change after creation
Git Commit 75c86b2a Branch feat/allow-epp-schema-change Document 1/1 ++ 1 --
Merge 9a43d0904c72542968a74bbba96f3ef3e297fbd8 into 100dc5fa507537fffa496e22706c3a6c1e9bca2a
Git Commit f591b8cd Branch pull/599/merge Document 2/607 ++ 415 --
chore(deps): bump the all group across 1 directory with 8 updates
Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@algorandfoundation/tealscript](https://github.com/algorandfoundation/TEALScript) | `0.106.3` | `0.107.2` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.64.0` | `8.66.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.0` | `1.2.3` |
| [rolldown-plugin-dts](https://github.com/sxzz/rolldown-plugin-dts) | `0.23.2` | `0.28.0` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.7` | `25.0.9` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.66.0` |



Updates `@algorandfoundation/tealscript` from 0.106.3 to 0.107.2
- [Release notes](https://github.com/algorandfoundation/TEALScript/releases)
- [Commits](https://github.com/algorandfoundation/TEALScript/compare/0.106.3...0.107.2)

Updates `@typescript-eslint/eslint-plugin` from 8.64.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/eslint-plugin)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.5...3.9.6)

Updates `rolldown` from 1.2.0 to 1.2.3
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.3/packages/rolldown)

Updates `rolldown-plugin-dts` from 0.23.2 to 0.28.0
- [Release notes](https://github.com/sxzz/rolldown-plugin-dts/releases)
- [Commits](https://github.com/sxzz/rolldown-plugin-dts/compare/v0.23.2...v0.28.0)

Updates `semantic-release` from 25.0.7 to 25.0.9
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](https://github.com/semantic-release/semantic-release/compare/v25.0.7...v25.0.9)

Updates `tsx` from 4.23.1 to 4.23.9
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.9)

Updates `typescript-eslint` from 8.64.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@algorandfoundation/tealscript"
  dependency-version: 0.107.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rolldown
  dependency-version: 1.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rolldown-plugin-dts
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: semantic-release
  dependency-version: 25.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.23.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: typescript-eslint
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Git Commit 9a43d090 Branch dependabot/npm_and_yarn/all-13923b79ef Document 2/607 ++ 415 --