For founders · built by Andrew Edmond

Know what a buyer will find before they look.

A buyer's technical adviser reads your repository in the weeks before a data room opens. Read it first, while each finding is still something you can fix rather than a discount.

Buy a Report

Paste any repository URL from GitHub, GitLab, Azure DevOps, Bitbucket, Codeberg, Gitea or SourceHut. A public repository is free, with no account.

106 diligence checks, seven dimensions

History and working tree, rated on the dimensions a deal team cares about. What the code cannot answer becomes a question for the room.

Every finding cites its evidence

The commit, path and lines it rests on, or, when something is missing, what was looked for.

Your repository stays on your machine

Public repos need no access at all. For private ones, the collector reads it there. What it sends: never whole files; facts and short excerpts of up to 120 characters where a check matched.

From the library

A real report: prometheus/prometheus

As its public page shows it: the seven ratings, then one finding with its evidence.

Borehole
Risk register · free tier
prometheus/prometheus
dff7878 · 18,736 commits · 1,691 files

Reads strong: 4 of 6 rated dimensions are strong, 2 are adequate and none is significant.

DimensionRating
01 Architecture & Codebase — including AI provenance strong
02 Engineering Process & SDLC Maturity strong
03 Organization & Key-Person Risk strong
04 Product & Engineering Maturity adequate
05 Security & Reliability Posture adequate
06 Observability & Operations strong
07 Fit with the Acquirer not assessable
strong adequate significant findings not assessable from a repository

Product & Engineering Maturity

04 · adequate
04.3

109 direct dependencies in a single manifest

adequate

go.mod declares 109 direct dependencies. Each one is a maintenance obligation, a supply-chain surface and a potential licence question that transfers with the asset. The count says nothing about whether any given dependency was a good choice; it says how many such choices a buyer inherits.

Evidence
direct-dependenciesgo.mod — 109 declared
direct-dependenciesweb/ui/mantine-ui/package.json — 39 declared
direct-dependenciesweb/ui/react-app/package.json — 38 declared
direct-dependenciesweb/ui/module/codemirror-promql/package.json — 2 declared

Read the full report: 7 findings →

What a survey rates

Seven dimensions

  1. 01Architecture & Codebase — including AI provenance 11 checks
  2. 02Engineering Process & SDLC Maturity 16 checks
  3. 03Organization & Key-Person Risk 10 checks
  4. 04Product & Engineering Maturity 19 checks
  5. 05Security & Reliability Posture 34 checks
  6. 06Observability & Operations 16 checks
  7. 07Fit with the Acquirer a person, in an engagement

If the report is wrong or not enough

We refund the order in full, on request within 30 days, when a report has no finding with evidence, read too little of the history for your purpose, or is not what was described. Terms, section 7.

Compare the tiers on Pricing