Borehole
Diff · what moved
hashicorp/terraform
db4eef4 → 55d258b
-10 commits read
db4eef4 → 55d258b
-10 commits read
1 finding resolved and 4 appeared; Architecture & Codebase — including AI provenance, Organization & Key-Person Risk improved.
1 finding resolved, 4 appeared, 0 changed severity without clearing. AI-declared share moved from 0% to 0% of added lines — a disclosure, not a rating.
| Dimension | Before | After | ||
|---|---|---|---|---|
| 01 | Architecture & Codebase — including AI provenance | adequate | strong | improved |
| 02 | Engineering Process & SDLC Maturity | strong | strong | — |
| 03 | Organization & Key-Person Risk | adequate | strong | improved |
| 04 | Product & Engineering Maturity | adequate | strong | improved |
| 05 | Security & Reliability Posture | adequate | adequate | — |
| 06 | Observability & Operations | strong | not assessable | — |
| 07 | Fit with the Acquirer | not assessable | not assessable | — |
03
Organization & Key-Person Risk
Resolved — The next contributor after the top one has not committed here for more than a year
04
Product & Engineering Maturity
Appeared — Releases are cut from another branch than the one surveyed
05
Security & Reliability Posture
Appeared — 6 advisories against this project in the last 24 months, 5 high or critical
Appeared — 5 credential-shaped strings in the tree sit in tests, examples, documentation or local development settings
Appeared — Relicensed: MPL-2.0 → BUSL-1.1 (2023-08-10)
Still present, reason changed — The licence is BUSL-1.1: source available, not open source
DIFF MODE · DETERMINISTIC LAYER