Borehole reading · not a certification
Check a mark
A Borehole code resolves to the analysis we actually ran. Type the code printed on a report and this page re-renders the authoritative version — not a claim about it.
Twelve characters. Case and dashes do not matter.
Verified
This code matches a Borehole analysis of astral-sh/uv, and the record is unchanged since the mark was issued.
- Repository
- astral-sh/uv
- Commit
- bac35f58da775205115e37f6f5f7ddff520a3a36
- Surveyed
- 2026-10-03
- Mark issued
- 2026-10-03
- Assessor
- borehole 0.7.12
- Checks run
- 106
- Ran in
- cloud-run — not attested
This commit has been surveyed again since this mark was issued. The mark above is still valid — it attests to the survey it was issued for, and always will. But a newer reading of the same commit exists, made by borehole 0.7.13 on 2026-10-04, finding 5 things against this one's 5. Read the newer one.
What the analysis recorded
| Dimension | Band | Findings |
|---|---|---|
| Architecture & Codebase — including AI provenance | strong | 1 |
| Engineering Process & SDLC Maturity | strong | 0 |
| Organization & Key-Person Risk | adequate | 1 |
| Product & Engineering Maturity | strong | 0 |
| Security & Reliability Posture | adequate | 3 |
| Observability & Operations | not assessable | 0 |
| Fit with the Acquirer | not assessable | 0 |