Borehole
Diff · what moved
apache/superset
599026a → be06318
-932 commits read

2 findings resolved; Architecture & Codebase — including AI provenance, Engineering Process & SDLC Maturity moved the wrong way.

2 findings resolved, 0 appeared, 0 changed severity without clearing. AI-declared share moved from 19% to 19% of added lines — a disclosure, not a rating.

DimensionBeforeAfter
01 Architecture & Codebase — including AI provenance strong adequate worsened
02 Engineering Process & SDLC Maturity strong adequate worsened
03 Organization & Key-Person Risk strong strong —
04 Product & Engineering Maturity adequate adequate —
05 Security & Reliability Posture adequate adequate —
06 Observability & Operations adequate adequate —
07 Fit with the Acquirer not assessable not assessable —
04

Product & Engineering Maturity

Resolved — Releases are cut from another branch than the one surveyed

05

Security & Reliability Posture

Resolved — 17 advisories against this project in the last 24 months, 5 high or critical

Still present, reason changed — 3 locked dependencies have published vulnerabilities, 2 high or critical

Still present, reason changed — 3 deserialisers that can run code

DIFF MODE · DETERMINISTIC LAYER