Borehole
Diff · what moved
apache/superset
c14ac29 → 25cb6fc
+0 commits read
c14ac29 → 25cb6fc
+0 commits read
9 appeared; Engineering Process & SDLC Maturity, Observability & Operations moved the wrong way.
0 findings resolved, 9 appeared, 0 changed severity without clearing. AI-declared share moved from 78% to 36% of added lines — a disclosure, not a rating.
| Dimension | Before | After | ||
|---|---|---|---|---|
| 01 | Architecture & Codebase — including AI provenance | adequate | adequate | — |
| 02 | Engineering Process & SDLC Maturity | strong | adequate | worsened |
| 03 | Organization & Key-Person Risk | strong | strong | — |
| 04 | Product & Engineering Maturity | adequate | adequate | — |
| 05 | Security & Reliability Posture | adequate | adequate | — |
| 06 | Observability & Operations | strong | adequate | worsened |
| 07 | Fit with the Acquirer | not assessable | not assessable | — |
02
Engineering Process & SDLC Maturity
Appeared — Tests are retried until they pass
05
Security & Reliability Posture
Appeared — 4 locked dependencies have published vulnerabilities, 5 high or critical
Appeared — 99 of 400 migrations cannot be rolled back
Appeared — 1 environment file is committed
Appeared — 3 shell commands built from strings
Appeared — 5 SQL statements built from strings
Appeared — The build runs third-party code it does not pin
Appeared — 3 deserialisers that can run code
06
Observability & Operations
Appeared — No error reporter is wired in
DIFF MODE · DETERMINISTIC LAYER