For acquirers · built by Andrew Edmond
Read a target's repository before the data room opens.
A repo survey is a cheap first read on every name in the pipeline: which targets deserve the expensive attention, and which questions to open with when they get it.
History and working tree, rated on the dimensions a deal team cares about. What the code cannot answer becomes a question for the room.
The commit, path and lines it rests on, or, when something is missing, what was looked for.
The target runs the collector on its own machine, and its repository never leaves it. What it sends: never whole files; facts and short excerpts of up to 120 characters where a check matched.
A real report: prometheus/prometheus
As its public page shows it: the seven ratings, then one finding with its evidence.
dff7878 · 18,736 commits · 1,691 files
Reads strong: 4 of 6 rated dimensions are strong, 2 are adequate and none is significant.
| Dimension | Rating | ||
|---|---|---|---|
| 01 | Architecture & Codebase — including AI provenance | strong | |
| 02 | Engineering Process & SDLC Maturity | strong | |
| 03 | Organization & Key-Person Risk | strong | |
| 04 | Product & Engineering Maturity | adequate | |
| 05 | Security & Reliability Posture | adequate | |
| 06 | Observability & Operations | strong | |
| 07 | Fit with the Acquirer | not assessable |
Product & Engineering Maturity
04 · adequate109 direct dependencies in a single manifest
adequatego.mod declares 109 direct dependencies. Each one is a maintenance obligation, a supply-chain surface and a potential licence question that transfers with the asset. The count says nothing about whether any given dependency was a good choice; it says how many such choices a buyer inherits.
| direct-dependencies | go.mod — 109 declared |
| direct-dependencies | web/ui/mantine-ui/package.json — 39 declared |
| direct-dependencies | web/ui/react-app/package.json — 38 declared |
| direct-dependencies | web/ui/module/codemirror-promql/package.json — 2 declared |
Seven dimensions
- 01Architecture & Codebase — including AI provenance 11 checks
- 02Engineering Process & SDLC Maturity 16 checks
- 03Organization & Key-Person Risk 10 checks
- 04Product & Engineering Maturity 19 checks
- 05Security & Reliability Posture 34 checks
- 06Observability & Operations 16 checks
- 07Fit with the Acquirer a person, in an engagement
If the report is wrong or not enough
We refund the order in full, on request within 30 days, when a report has no finding with evidence, read too little of the history for your purpose, or is not what was described. Terms, section 7.