Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
17 commits sit in this repo's top risk tercile, which is 34% of the 50scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 7.0 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Consistently other-driven across its history.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | 5e58a659Initial commit | Costy Blokh | 3y ago | +46.1K -0 | 99%Elevated | — |
| 2 | 4e891c4aAdded MPC-BAM implementation of https://eprint.iacr.org/archive/2024/1950/20250601:081848. Also improved error handling, expanded test suite, fixed spelling | Nadav Barak | 3mo ago | +17.3K -2.8K | 96%Elevated | — |
| 3 | 77333548July 2025 update | Nadav Barak | 1y ago | +10.6K -796 | 96%Elevated | — |
| 4 | 1fb5d2a3upstream recent changes | Eugene Kogan | 1y ago | +2.0K -414 | 93%Elevated | — |
| 5 | 33a21483upgrade catch library to 2.13.8 | Nadav Barak | 2y ago | +308 -229 | 91%Elevated | — |
| 6 | a162353cWLT-1661 Ensure all virtual classes have a key function | Igor Khanin | 1y ago | +347 -620 | 89%Elevated | — |
| 7 | df115518CMake build system | Igor Khanin | 2y ago | +188 -1 | 87%Elevated | — |
| 8 | 6034fba2Intoduce timing map, for using the same pattern in the code but spending less time spent on logging and benchmarking while holding a mutex. Moved some constructors into C++ files for simpler linkage | Nadav Barak | 2y ago | +140 -58 | 84%Elevated | — |
| 9 | 0a059a1dCOR-50044 Portability fixes | Igor Khanin | 2y ago | +154 -149 | 84%Elevated | — |
| 10 | 4c445741Prevent override of MtA ack and key metadata | Igor Khanin | 2y ago | +129 -21 | 80%Elevated | — |
| 11 | 63614f7bAdded example docker containers according to readme | Nadav Barak | 2y ago | +103 -0 | 80%Elevated | — |
| 12 | 3bb0ef9cUpdate README file && support OSX | Eugene Kogan | 1y ago | +127 -88 | 77%Elevated | — |
| 13 | 2d3f5c43Fix wrong return code | Michael Adjedj | 1y ago | +84 -67 | 74%Elevated | — |
| 14 | 84b7fb83Add coprimality checks to affine proof | Costy Blokh | 2y ago | +78 -0 | 74%Elevated | — |
| 15 | 0c5d6ea9Support runtime pluggable logging callback | Igor Khanin | 2y ago | +95 -31 | 71%Elevated | — |
| 16 | a5b58982Build the Catch2 main only once | Igor Khanin | 2y ago | +69 -38 | 69%Elevated | — |
| 17 | 82e85bb9Optionally allow compiling with newer openssl using cmake. Speed up ubuntu22 CI | Eugene Kogan | 2y ago | +62 -55 | 67%Elevated | — |
| 18 | 853eceecAdd Gitlab CI pipeline | Igor Khanin | 2y ago | +39 -0 | 65%Typical | — |
| 19 | 61f311c6replace memset_s with OPENSSL_cleanse, which should be more reliable across different platforms | Nadav Barak | 2y ago | +38 -62 | 63%Typical | — |
| 20 | 5c610ea6Fix/wrong size in proof paillier large factor serialization | Michael Adjedj | 2y ago | +31 -8 | 61%Typical | — |
| 21 | ad31e611Simplify docker run command and copy sources into container | Nadav Barak | 2y ago | +38 -5 | 59%Typical | — |
| 22 | d581588aadd github CI configuration | Nadav Barak | 2y ago | +22 -0 | 57%Typical | — |
| 23 | 180a8c11Fix `is_positive` since it gave wrong results with `secp256r1` | Michael Adjedj | 2y ago | +19 -0 | 55%Typical | — |
| 24 | fec61338Use portable byteswap functions | Igor Khanin | 2y ago | +18 -14 | 53%Typical | — |
| 25 | 1dd05ccfRevert file name to logging_t | Igor Khanin | 2y ago | +14 -14 | 51%Typical | — |
| 26 | 5d63f491drng_read_deterministic_rand: better handling large values of length_in_bytes | Nadav Barak | 1y ago | +14 -9 | 48%Typical | — |
| 27 | 53a2428eHandle out of memory scenario in handling is_coprime_fast return value | Nadav Barak | 2y ago | +13 -13 | 48%Typical | — |
| 28 | e932d0c4Better checking for BN_CTX_get | Nadav Barak | 1y ago | +14 -2 | 45%Typical | — |
| 29 | 8c3bc586WLT-1680: Fix openssl dependency | Eugene Kogan | 1y ago | +14 -11 | 43%Typical | — |
| 30 | c96f6aafBuild BIP-44 path in caller allocated array | Igor Khanin | 2y ago | +12 -17 | 41%Typical | — |
| 31 | 6a1aa992Makefiles: echo file name before building rather than after | Nadav Barak | 2y ago | +9 -9 | 39%Typical | — |
| 32 | 4d4cba41fix: Prevent NULL access when the EdDSA persistency layer is inconsistent | Nadav Barak | 2y ago | +6 -0 | 36%Typical | — |
| 33 | a1a72df0Add mutex to catch's code to support concurrency in tests | Nadav Barak | 2y ago | +6 -1 | 36%Typical | — |
| 34 | 51ac9aedgithub CI: Seperate building source and building tests | Nadav Barak | 2y ago | +5 -2 | 33%Below typical | — |
| 35 | ac6b6bc4Better error management in verifiable secret sharing | Nadav Barak | 1y ago | +5 -2 | 29%Below typical | — |
| 36 | 108b0469Fix typo | Nadav Barak | 2y ago | +4 -4 | 29%Below typical | — |
| 37 | c47e1095COR-50044 WASM fix | Igor Khanin | 2y ago | +5 -1 | 29%Below typical | — |
| 38 | f70db58dMake arch flags optional to enable compilation (e.g. linux-aarch64) | kozyilmaz | 2y ago | +2 -1 | 24%Below typical | — |
| 39 | c0078da2Update SECURITY.md | arikblocks | 3y ago | +2 -2 | 24%Below typical | — |
| 40 | 79471703Add placeholder logging_t unit | Igor Khanin | 2y ago | +2 -0 | 21%Below typical | — |
| 41 | fdaae9abinitialize curve variable with NULL when building stark context | Nadav Barak | 1y ago | +2 -1 | 18%Below typical | — |
| 42 | cba8a976undo changes to .gitignore /.dockerignore | Nadav Barak | 2y ago | +2 -4 | 18%Below typical | — |
| 43 | 7146d5dcUse OPENSSL_cleanse on a tmp variable instead of memset | Nadav Barak | 1y ago | +1 -1 | 9%Below typical | — |
| 44 | 2d940f1eCOR-26946 Fix memcpy size parameter | Nadav Barak | 2y ago | +1 -1 | 9%Below typical | — |
| 45 | f7289a6eFix compiler error on newer platforms | Nadav Barak | 2y ago | +1 -1 | 9%Below typical | — |
| 46 | 487369baMake unit test more deterministic by properly zeroeing out variable in tests | Nadav Barak | 2y ago | +1 -0 | 9%Below typical | — |
| 47 | 78183383Added built test binaries to .gitignore | Nadav Barak | 2y ago | +1 -1 | 9%Below typical | — |
| 48 | 62191054'cmp_key_metadata' struct definition fix | kozyilmaz | 2y ago | +1 -1 | 9%Below typical | — |
| 49 | 88530614Update README.md | arikblocks | 3y ago | +1 -1 | 9%Below typical | — |
| 50 | a8f6a6f0remove test job now that cmake is used exclusively | Nadav Barak | 1y ago | +0 -21 | 1%Below typical | — |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 50 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
Repowise tracks change history across 134 files in fireblocks/mpc-lib. In the last 90 days 108 files were touched, 108 times in total, most often bam_sign_benchmark.cpp. Every commit is scored for change risk from its size, spread and the history of the files it touches.
