Borehole
Diff · what moved
medusajs/medusa
6cc1a4a → 3d85f84
+174 commits read
6cc1a4a → 3d85f84
+174 commits read
1 finding resolved.
1 finding resolved, 0 appeared, 0 changed severity without clearing. AI-declared share moved from 0% to 5% of added lines — a disclosure, not a rating.
| Dimension | Before | After | ||
|---|---|---|---|---|
| 01 | Architecture & Codebase — including AI provenance | strong | strong | — |
| 02 | Engineering Process & SDLC Maturity | adequate | adequate | — |
| 03 | Organization & Key-Person Risk | adequate | adequate | — |
| 04 | Product & Engineering Maturity | strong | strong | — |
| 05 | Security & Reliability Posture | adequate | adequate | — |
| 06 | Observability & Operations | adequate | adequate | — |
| 07 | Fit with the Acquirer | not assessable | not assessable | — |
05
Security & Reliability Posture
Resolved — 3 shell commands built from strings
Still present, reason changed — 57 locked dependencies have published vulnerabilities, 73 high or critical
DIFF MODE · DETERMINISTIC LAYER