so how did deepvault get into the latest wallet then if there has been no new commit?
The dev is releasing custom Windows binaries without being transparent about his changes, that's how.
Be very, very cautious. I would not be using that Windows binary.