Borehole
Diff · what moved
denoland/deno
461f32e → 2200b3e
+4 commits read

2 findings resolved and 1 appeared; Architecture & Codebase — including AI provenance, Security & Reliability Posture moved the wrong way.

2 findings resolved, 1 appeared, 0 changed severity without clearing. AI-declared share moved from 3% to 3% of added lines — a disclosure, not a rating.

DimensionBeforeAfter
01 Architecture & Codebase — including AI provenance strong adequate worsened
02 Engineering Process & SDLC Maturity strong strong —
03 Organization & Key-Person Risk strong strong —
04 Product & Engineering Maturity adequate adequate —
05 Security & Reliability Posture strong adequate worsened
06 Observability & Operations not assessable strong —
07 Fit with the Acquirer not assessable not assessable —
04

Product & Engineering Maturity

Resolved — Releases are cut from another branch than the one surveyed

Still present, reason changed — 20% of the code is legacy or compatibility code, the oldest 43 months old

05

Security & Reliability Posture

Resolved — 27 advisories against this project in the last 24 months, 13 high or critical

Appeared — 2 vendored components with no licence

Still present, reason changed — 18 locked dependencies have published vulnerabilities, 1 high or critical

DIFF MODE · DETERMINISTIC LAYER