Ecosystem metrics
- New Repos
- 8
- New
- Commits
- 595
- down 29.8%
- Releases
- 1
- down 85.7%
- Contributors
- 38
- down 37.7%
- Merges
- 9
- down 40.0%
Activity Overview
Commits and releases over time
- Commits
- Releases
- Authors
Repository Explorer
No repositories match that filter.
8913 commits in all time
Jul 30, 2026 15:45 – Oct 28, 2026 15:45 UTC
docs: record accepted residuals from review rounds on audit remediation
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
3bf03486
fix/audit-2026-10-28
1/727 ++ 727 --
fix: address code review round 10 on audit remediation
Refuse tiny amounts that convert to zero base units and require whole numbers for the Shamir threshold and share count. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
d0a08b61
fix/audit-2026-10-28
3/7 ++ 2 --
fix: address code review round 9 on audit remediation
Gateway amounts use an exact conversion that refuses more digits than the asset has, toBaseUnits keeps its rounding for existing callers, the connected-app column is only added for WalletConnect and Liquid, and small cleanups. Also restores LF line endings in files touched by the previous commit. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
08e42ee4
fix/audit-2026-10-28
6/497 ++ 471 --
fix: address code review round 8 on audit remediation
Only link a registry owner URL that points at the labelled repository, convert gateway amounts without binary noise, show the connected-app column only for WalletConnect and Liquid, and let the whole E2E config honour E2E_PORT. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
289658d0
fix/audit-2026-10-28
6/491 ++ 458 --
fix: address code review round 7 on audit remediation
Validate the merchant page fee like Pay and Sign, derive the gateway fee cap from the shared constant, keep config.json available offline through a network-first runtime cache, and stop resetting the hello guard before a pairing succeeds. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2e44eda7
fix/audit-2026-10-28
4/15 ++ 5 --
Merge c076bf2bea3471b7a3c0860ee23254ae6cf2653c into 4c1014b26c1404b5b5bf53548cb986a1ff9650b1
60ae9b10
pull/1149/merge
4/87 ++ 4 --
fix: address code review round 6 on audit remediation
Keep a malformed fee as text when decimals are given, allow the asset's own fraction digits in the gateway builder, and do not show the asset error while the lookup is still running. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
62e6773c
fix/audit-2026-10-28
3/17 ++ 4 --
fix: preserve keyreg voteFirst/voteLast/voteKeyDilution zero values
An online key registration transaction with voteFirst=0 (a legitimate round value) failed to encode: the field was dropped during msgpack serialization because OptionalSchema treats the wrapped schema's default (0 for Uint64Schema) as an omit-empty default. On decode the field was restored as undefined, so reconstructing the Transaction threw "Online key registration missing at least one of the following fields: voteKey, selectionKey, voteFirst, voteLast, voteKeyDilution". The same error occurred when decoding a block containing such a transaction. Introduce SparseOptionalSchema, which treats only `undefined` (not the wrapped schema's zero default) as omittable, and use it for the votefst, votelst and votekd fields. These fields remain omittable so they stay absent on non-keyreg transactions, leaving other transaction types' wire format unchanged. Fixes #925
c076bf2b
pull/1149/head
4/87 ++ 4 --
fix: address code review round 5 on audit remediation
Ignore non-numeric amounts in Pay and Sign, update example links to microalgo fees, cap the gateway builder fee, bound the Shamir share count, and show the localized unknown label for requests without a known session. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
212aaeab
fix/audit-2026-10-28
5/7 ++ 7 --
fix: address code review round 4 on audit remediation
Round fee amounts to whole microalgos, refuse gateway amounts that scale to zero base units, keep raw amount text in the protocol parser, drop a stored Liquid credential on binding mismatch, preserve watch-only data on replace, and add E2E specs for the gateway builder and Shamir threshold. Direct E2E specs honour E2E_PORT. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2e0a9595
fix/audit-2026-10-28
13/233 ++ 33 --
Merge dce8ba47352a1e020c07bb409b6140fe4efb9864 into d74d0c8dbcc7f46d325c392373cab5a81ba9ea7b
b2154c9a
pull/851/merge
2/36 ++ 0 --
transaction: reject asset id 0 in access-list resource refs
Under UseAccess, MakeApplicationCallTxWithAccess passed a ForeignAssets entry of 0 straight into the access list, appending a zero-valued (empty) ResourceRef. The AVM treats that as an empty box reference rather than an asset reference, so a 0 asset id silently produced a different, incorrect transaction instead of an error. Reject asset id 0 in the access-list composition so callers must pass an explicit box reference for that behavior. Fixes #764.
dce8ba47
pull/851/head
2/36 ++ 0 --
fix: address code review round 3 on audit remediation
Keep typed passwords after a failed change, require the network minimum for a link fee, share the ARC-14 realm constants, reject self-payments of the payee in the gateway, replace unknown with real types, cache the request-table descriptions, and tidy the Liquid hello/credential checks. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
4b6e6488
fix/audit-2026-10-28
20/78 ++ 40 --
fix: address code review round 2 on audit remediation
Validate the stable-workflow tag and pass it through env, run the duplicate account guard before any state change and let a signing account replace a watch-only entry, reset Liquid hello per connection, keep link amounts as text, bound the gateway amount, and keep the app rows on WC/Liquid. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
8c1e4862
fix/audit-2026-10-28
7/81 ++ 19 --
fix: address code review round 1 on audit remediation
Store the Liquid credential only after the wallet binding is checked, refresh Liquid peer metadata per connection, require a transaction type at admission, reject malformed gateway link amounts, exact base-unit arithmetic and an error message in the gateway builder, a localized fee toast, and a duplicate-account guard in every add-account mutation. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
33c53a35
fix/audit-2026-10-28
20/115 ++ 46 --