Borehole
Diff · what moved
hashicorp/terraform
55d258b → 7dd5b33
-18 commits read
55d258b → 7dd5b33
-18 commits read
4 findings resolved and 2 appeared; Architecture & Codebase — including AI provenance, Product & Engineering Maturity moved the wrong way.
4 findings resolved, 2 appeared, 0 changed severity without clearing. AI-declared share moved from 0% to 0% of added lines — a disclosure, not a rating.
| Dimension | Before | After | ||
|---|---|---|---|---|
| 01 | Architecture & Codebase — including AI provenance | strong | adequate | worsened |
| 02 | Engineering Process & SDLC Maturity | strong | strong | — |
| 03 | Organizational Health | strong | strong | — |
| 04 | Product & Engineering Maturity | strong | adequate | worsened |
| 05 | Security & Reliability Posture | adequate | adequate | — |
| 06 | Observability & Operations | not assessable | strong | — |
| 07 | Fit with the Acquirer | not assessable | not assessable | — |
04
Product & Engineering Maturity
Resolved — 19 files still carry code deprecated more than two years ago
Resolved — Releases are cut from another branch than the one surveyed
Appeared — Effort is shifting from building to rewriting
Appeared — 314 direct dependencies in a single manifest
05
Security & Reliability Posture
Resolved — 6 advisories against this project in the last 24 months, 5 high or critical
Resolved — Relicensed: MPL-2.0 → BUSL-1.1 (2023-08-10)
Still present, reason changed — 9 credential-shaped string(s) committed to the tree
Still present, reason changed — Licence text does not match a standard licence
DIFF MODE · DETERMINISTIC LAYER