$ the-wire · showcase
Bitcoin's Go and Lightning stacks enroll in OSS Scanner
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
4 people shipped this
Five maintainers filed enrollment PRs to anthropics/oss-scanner in the last day, and three of them land on code that parses attacker-supplied data while holding real value.
Enrol lnd in OSS Scanner anthropics/oss-scanner
Roasbeef enrolled lnd, the reference Lightning node that custodies and routes real value on mainnet and parses messages from any peer that connects. Its peer wire format, commitment state machine and HTLC forwarding are the parts most Lightning software in the ecosystem depends on.
Enrol btcd in OSS Scanner anthropics/oss-scanner
The same maintainer enrolled btcsuite/btcd, whose consensus, script and wire packages back lnd, btcwallet and neutrino. A validation or parsing flaw there reaches well past btcd's own users.
Enroll rust-bitcoin anthropics/oss-scanner
apoelstra enrolled rust-bitcoin, extending the day's Bitcoin coverage to the Rust side of the ecosystem. The submission carries the maintainer attestation, the terms acceptance, and a local pass of tools/validate.py.
Enroll dapr anthropics/oss-scanner
JoshVanL enrolled dapr, putting the distributed application runtime into the scanner's project set. The PR includes the completed enrollment checklist and a project.yaml that passes validation.
Enroll pwsafe: Dockerfile, project.yaml, threat_model.md anthropics/oss-scanner
ronys enrolled pwsafe with a Dockerfile, project.yaml and threat_model.md in the submission, the most complete artifact set of the five. The threat model documents the intended attack surface before scanning starts.
